How to make floodgate ignore traffic?

[pointcheck]

How can I make floodgate ignore traffic to hosts/subnets outside of my firewall but before the WAN?

The WAN bandwidth is only 10Mb and the outside subnet bandwidth is 1000Mb.

I have the WAN policy correct, so how do I add the hosts on the external LAN with greater than 10Mb policies?

[RayPesek]

See if the QoS policy allows you to do Negate Cell like the security policy does. You could enter those devices in Destination, right-click it and select Negate, and push the policy.

"Negate" means "anything except what is in this cell."

Ray

[pointcheck]

Originally Posted by RayPesek

See if the QoS policy allows you to do Negate Cell like the security policy does. You could enter those devices in Destination, right-click it and select Negate, and push the policy.

"Negate" means "anything except what is in this cell."

Ray

There is no "negate cell" on the source or destination right click in the QoS policy tab. Anyway, I don't think it would work because what needs to be modified is the "Action" field.

What I mean by "ignore" is not subject the traffic to the QoS policy.

[RayPesek]

Pity. Negate would work because the QoS rule would not apply to anything in the cell.

You could always do two rules, one allowing 1000 M/bps to those devices only and one after it to "any".

Ray

[pointcheck]

How would that work, since the external interface is set to the WAN bandwidth of 10Mb?

[RayPesek]

It wouldn't. I thought you would have the external interface set to its real bandwidth and would use guarantees or limits for the rules.

Ray

[pointcheck]

Right, it would work fine with only limits, but we are using weights (and a couple limits).

Thanks.