L7 Management
Contents
1. te 24 Hour Format Everyday sun Man Tue Wed Thu Fri 22 de your future life L7 Management Step 1 Name the rule The name of the rule will be shown on the list so administrator could name the rule by users or usages Rule Name Step 2 Choose the application P P Category E Item E Category Item Delete P2P Software All Other Applications Web Page ii 3 Media Player 4 SskypelVoice E E Other amp pplications SkypeOut Application Define Web Page Web Video ad Games K k L Application Define Figures are used for reference Please visit the official website for the actual application support list 1 After choosing Category the Item column will show the crosponding list Hints e Directly click on the applications to put them effective e Cancel the application by double clicks e Click Choose All to put all applications into effective and click unnecessary items for cancel e Items could be chosen in multiple categories 2 Click to drop the applications into the right column 23 Ka your future life L7 Management Step 3 QoS Configuration Q Quality of Service C wand L WAN 2 WAN3 wan4 use F USB2 Mini Rate 100 KpiUsec Max Rate 500 Kbitisec Share total bandwidth with all IP addresses o Assign bandwidth for each IP address Select on which WAN the QoS rule should be executed It can be a Source IP Group Thi2. Ww bal x Application Define Figures are used for reference Please visit the official website for the actual application support list 10 de your future life L7 Management 1 Set this host as exception server The seleced server will not be controlled by Inbound L7 Filter if the item is checked Inbound traffic will be allowed directly 2 After choosing Category the Item column will show the crosponding list e Directly click on the applications to put them effective e Cancel the application by double clicks e Click Choose All to put all applications into effective and click unnecessary items for cancel e Items could be chosen in multiple categories 3 Click to drop the applications into the right column Step 4 Add external client s IP as filtering condition E Add external client s IP as filtering condition Inbound traffic not only should match allowed application but selected external IP range For an example one enterprise headquater in New York has an ERPserver which is used by internal employees in New York as well as the branches in Boston and Brentwood By adding ERP traffic as allowed traffic and adding the IP ranges of both Boston and Brentwood branches into exceptional external users The traffic doesn t match the allowed application and IP range will be blocked Step 5 Click Cl to save the confiquration 11 Ka CINCO your future life L7 Management 2 L7 VIP Priority C
3. Backup Server IP Domain Service Port BEEN c D 13 Default Server The setting of the system default server Backup Server Set up the backup server including the IP address or the URL along with the service port number
4. a GING your future life L7 Management de your future life L7 Management Content 1 Rie OR run unasrpUErDIDEEP E E RENE T IDE 3 LI Outbound C7 PRE a s dud a ae EE ad rU ou ae DUE UPU FE ous 3 LAN DORA LT eI a MS aa ra IM PERO RC oies 8 2 LZ VIP Pronty S NANTOl names ERES IURE VREDRESQIF ET PUEMEPE 12 3 L7 Application Binding nnnm 16 4 Neo 20 5 APPNCAUON 1 0 ee re papa x Ere ee ee 26 6 Applicatios es 10 a nn ee ee re eee eT 28 7 Database Update cccccccccccsscccccsneenneeeeeeeeeeeeeseeeceeueennaenntenseeeensseeeeguneags 29 de your future life L7 Management 1 L7 Management L7 Management Application Status LY VIP Priority Channel LY Application Binding L7 QoS Database Update 1 1 Outbound L7 Filter e Outbound L7 Filter has two modes Block Application and Allow Application Q Mode Block Application __ Allow Application e Block Application mode black list is to set the applications blocked so intranet can not access these applications but the traffic for other applications will still work e Allow Application mode whitelist is dening all applications except Application Allowed e These two modes are different in the control level for network security so UI setting is the same The description below will use Block Application as example de CINCO your future life L7 Managem
5. Management Q Version Check No New Version Is Available Version Number v1 0 0 0 File Size OKB UTTREP TERM Juy Latest Version Check Q Advanced Function Previous Version V0 0 0 0 Current version V1 0 0 0 Downloaded Version Enable Automatic Version Check Every Tr Disable Disable Enable Automatic Update Installation Define Update Schedule 23 00 24 Hour Format Man Tue Wed Thu Fri Sat sun Default Server Recommended Option Backup Server IPiDamain Service Part 30 de your future life L7 Management Version Check Version Check 4 No New Version Is Available Version Number V1 0 0 0 File Size OKB UDE EN ETET Juv 3 Latest Version Check Check How Version status When your router connected with database server and the availible new check field version has been checked to download the prompt of version status newest version number and file size will be displayed on this filed Download Now Download this version immediately after click this button If you do not update immediatly after you downloaded this version will reserve in system you can download manually from downloaded version in Version Management Latest Version The latest time of server version checking by router Click C manually to check again immediately The frequency of check time can be adjusted in Advance Setting Version Management Previous Version V0 0 0 0
6. from destination IP groups in Group Management de CINCO your future life L7 Management Add Hew Rule 2 Add new rule dic hdd Hew Rule Rule Name RuleName Choose Internal Server L h 00 S 6 Q Choose an application Setthis host as exception server Choose allowed items L a Category T E Category Item Delete E mail 4 Network Tools 3 Lal Other Applications 2222 wi i Application Define C Add external client s IP as filtering condition Apply Cemesl de L Ex EE am Ta E Fl BH ae L KN ie Zi your future life L7 Management Step 1 Name the rule The name of the rule will be shown on the list so administrator could name the rule by users or usages Rule Name Company WEB Step 2 Choose the server Choose the rule set for virtual or DMZ servers Choose Internal Server Choose Internal Server Windows Internet Explorer BB http 7192 168 1 1 L7 Choose Internal Server C DMZ Forwarding Any FTP TCP 21 21 2192 168 1 100 DMzZ Forwarding WANT1 HTTP TCP 80 601 192 1661 10 Remarks 1 Inbound L7 Filter will cause the DMZ host inactive 2 OMZ Portis not controlled by LT Step 3 Choose the application Choose an application Setthis host as exception server Choose allowed items gt Category 3 Item Category Item Delete E mail Network Tools Ill Other Applications
7. Current Version V1 0 0 0 Downloaded Version Previous Version Previous version of database server that system has been used Current Version Cuurent version of database server that system is being used Downloaded The version you downloaded by Download Now in version check Version Update Now function You can click to manually update 31 G your future life L7 Management Automatic Version Check Hours Enable Automatic Version Check Every 24 Disable Enable Automatic Adjust the frequency of server version check time Version Check Every Hours Disable System will not update the database automatically administrator can still use to comfirm if the server has the newest version or to adjust the check frequency manually Advance Setting Automatic Update Installation Disable Enable Automatic Update Installation Q Define Update Schedule f 00 24 Hour Format Mon Tue Wed Thu Fri Sal Sun Disable the Automatic System will not update the database administrator can Update Installation Uodaie N update the database manually by press the Enable Automatic Update Download and update automatically if the system notice the Installastion new version Define Update Schedule Download and update automatically in the specific time if the 00 24hr system notice the new version Update Sever Do not change the set up by self Default Server Recommended Option
8. N when it detect this interface was dropped was dropped Source IP Group Configure IP range Step 4 Make sure the time setting is correct to make the rule in effective only during the set time Always is set as the default The time frame could be modified in the following settings Q Scheduling Apply this rule Always to 24 HourFormat Everyday Sun Mon Tue Wed Thu Fri sat Step 5 Click HR to save the rules In this case the administrator will set another rule to bind webpage to another WAN The setting process is the same so we won t explain again 19 de ONO your future life L7 Management 4 L7 QoS L7 Management Application Status L7 Blocking L7 VIP Priority Channel L7 Application Binding Database Update 1 Rule List Q The Maximum Bandwidth provided by ISP Apply Show Hos Table Summary Jump tol 1 MA Page 5 Mlentries per page site 192 168 1 200 205 Upstream 100 500Kbit was E R Add Hew Rule 20 your future life L7 Management The Maximum Bandwidth provided by ISP This table is relative to general QoS function Q The Maximum Bandwidth provided by ISP USB2 256 256 Show QoS Table e Filing WAN Upstream Downstream bandwidth with realistic broadband network bandwidth which user applying by ISP QoS Bandwidth control is according to the bandwidth number that user filling to calculate Click to save the set up Bandw
9. ba Blog WebWYW Application Define z Yahoo Messenger XFigures are used for reference Please visit the official website for the actual application support list 1 After choosing Category the Item column will show the crosponding list Hint e Directly click on the applications to put them effective e Cancel the application by double clicks e Click Choose All to put all applications into effective and click unnecessary items for cancel e Items could be choosing in multiple categories 2 Click to drop the applications into the right column Category Item a Delete Instant Messenger Google Talk il 3 Instant Messenger ICO i E Instant Messenger QQ TM il de your future life L7 Management Step 3 Make sure the time setting is correct to make the rule in effective onl during the set time All time is set as the default The time frame could be modified in the following settings Q Scheduling DEMNM Apply this rule I to I 24 Hour Format Everyday Sun Ion Tue Wed Thu Fri Sat Step 4 Set exceptaional users IP or number Q These settings will apply to all rules of this application Exception QQ Number L Exception Source IP Address e Administrator can set IP address or QQ numbers if QQ is blocked in the exceptional user setting Please note that the exceptional user setting will be applied to all the rules in the application For example if there is a Google Talk rule wit
10. cation support list 26 de your future life L7 Management Application Define Add New Rule Applications Name hinet speed test web DOMAIN speed hinet net PORT TCP 80 80 hinet speed test web Settings Dest IP Domain Mama Domain Mame speed hinet net Service Update this service Delete selected Service Add Step 1 Name the Application Step 2 Define the application by the URL destination or the port number The definable parameter as below Dest IP If only a single IP is to be restricted input this IP address such as 100 100 100 105 The rule will control only the IP 100 100 100 105 If an IP range is to be controlled input the range such as 100 100 100 105 200 Domain Name Use Domain Name to define the application for example input the speed hinet net such as http speed hinet net Set up the TCP UDP port number or apply the port group from the Group Management function Add to list Step 3 Click to add your own L7 application to the list right side to finish the setting Step 4 Appl our own application to the L7 management you can see your own L7 application on the Application Define gt Category Item P2P software All Media Player hinet speed test web Other Applications Application Define 21 de vour future life L7 Management 6 Applicatios Status L7 Management The Administrator can
11. check the whole applied applications from the Application Status function including the ID of the policies Application Status Jump to 1 Page 10 v lentries per page Next Page gt gt E mail IMAP 1 E mail SMTPs 1 E mail POP3s 1 E mail POP3 5 4 i E mail SMTP x Eii Media Player KuGou Music 1 AU Media Player PPS Ds Media Player QQ Music QQLive 1 mni Media Player TT Player zm 4 SL P2P Software Bilcomet EasyMule PP365 F Figures are used for reference Please visit the official website for the actual application support list Sorting and ordering Sorting the applications or ordering the applications by the name the applications Jump to the specific page 10 v entries perpage Identify the lines in one page Next Page gt gt Next page L7 VIP Priority Display policy which made by the application presses the ID to edit Channel the policy 28 de your future life L7 Management 7 Database Update L7 Management Application Status L7 Blocking L7 VIP Priority Channel L7 Application Binding L7 QoS Database Update function provides administrator to know the server side informations on this web page whether the newest version to update moreover to set up the update time of database and version check frequency 20 de CINCO your future life L7
12. ems for cancel e Items could be chosen in multiple categories 2 Click to drop the applications into the right column Step 3 Make sure the time setting is correct to make the rule in effective only during the set time Always is set as the default The time frame could be modified in the following settings Q Scheduling S Apply this rule Always v B to B 24 Hour Format Everyday sun Man Tue Wed Thu Fri Sat Ka your future life L7 Management Step 4 Click HR to save the rules 3 L7 Application Binding L7 Management L7 Qos Database Update 1 Rule List Q Summary Jump to 1 Y Page EM entries per page Skype WANA 192 168 1 200 254 Always i Media Player WAN3 Any Always a Add Hew Eule Add Hew Rule 2 Add New Rule Click 16 de CINCO your future life Q Choose an application Rule Name Category T P2P Software Media Player Lal Other Applications Application Define sl Jd Item Lomo L7 Management A A Item Delete Category cr pplication Define Setting Remove traffic to another WAN when the selected interface was dropped Scheduling Apply this rule Always Everyday sun Mon Tue wl kh Jeol 4HourFormat Wed Thu Fri Sat 17 de your future life L7 Management Take a community for an example This community applies for two ADSL with differe
13. ent 1 Rule list Outbound L7 filter Inbound L7 filter Q Mode Black Application I Q L7 Block Application Jurnp to 1 M Page 5 entries per page HS sas Maes RUH P2P black 192 166 1 201 254 EN Add Hew Eule d ONO L7 Management your future life Add Hew Rule 2 Add new rule ai SERRES Add Rule RuleName 4 Delete Category Item gt L E Item E wie Category M l Instant Messenger P2P Software Online Game Web Objects File Format stocks Software social Network Website Online Video Website Media Player Blog Application Define L K Application Define Scheduling Apply this rule to S 24 Hour Format Thu Fri i Everyday Sun Man Tue Wed Q These settings will apply to all rules of this application Exception QQ Number Exception Source IP Address aay LL Camel de your future life L7 Management Below are the steps for rule setting with an exmple in the enterprise Step 1 Name the rule The name of the rule will be shown on the list so administrator could name the rule by users or usages Step 2 Choose the application Rule Name Instant Messenge Category E Item J Instant Messenger All P2P Software E Gadu Gadu Online Game Google Talk Web Objects ICQ File Format MSNM Stocks Software QQ TM Social Network Website Skypervaice Online video Website Tlen pl Media Player We
14. h no exceptional IP when adding a new Google Talk rule with the exceptional IP 192 168 1 100 192 168 1 100 could use Google Talk anyway no matter applied to the original rule or the new rule Step 5 Click Apply to save the rule setting Ka your future life L7 Management 1 2 Inbound L7 Filter If administrator setup servers in intranet and functions like Virtual Server and DMZ Server are directed to the intranet server hosts and port numbers the server security level could be higher to allow the identified application traffic only in Inbound L7 Filter function 1 Rule list Outbound L filter Inbound L7 filter Enabled Jump to 1 Fage 5 entries per page Enabled Name Sever Edit Delete mpany All Traffi P PH 65535L 192 152 4 100 gt Ar Edit External Exception Client Add Hew Rule Exceptional External Users Jeee e e Group Add to list External users are not controlled by Inbound L7 Filter For example one enterprise headquater in New York has an ERP server which is used by internal employees in New York as well as the branches in Boston and Brentwood By adding the IP ranges of both Boston and Brentwood branches into exceptional external users when system recognizes the imcoming traffic is from either Boston and Brentwood branches the system will allow the traffic to pass without enterinig filtering process Exceptional external user can be not only assigned by IP range but also choose
15. hannel L7 Management Application Status L7 Blacking 1 Rule List Q Summary 5 entries per page Jump to 1 Y Page SMTP POP3 POP3s Any IP Always Any Application 192 166 1 1 100 Always Add Hew Rule 2 Add New Rule Click MESES 12 de CINCO your future life L7 Management Basic Setting interface O wani O wanz O wana O wana LJ use CL USB2 Q Set Application or IP as VIP C VIP Application VIP Source IP Group Q Scheduling SSS H M M Q to 24 Haur Format Everyday sun Man Tue Wed Thu Fri Sat Apply this rule Always Apay o Cengal Step1 Basic Setting Basic Setting peine interface O want O wan2 O wana O wans CO use F usg2 e The name ofthe rule will be shown on the list so administrator could name the rule by users or usages Select one WAN as VIP For example only the traffic of president room on WAN1 and WAN is VIP traffic on other WAN ports is not VIP Hint If users want traffic only run on VIP WAN users can also configure L7 Application Binding 13 de your future life L7 Management Step2 Set Application or IP as VIP Q Set Application or IP as VIP VIP Application VIP Source IP Group e Set application as VIP For instance Webpage is selected When the system recognizes
16. idth unit is kbit some of the software applications display by KB 1KB 8kbit Calculating bandwidth utility of QoS rule minimize of bandwidth x IP set up number For example IP range is 192 168 1 101 110 minimize bandwidth by each IP is 500kbit sec the total bandwidth utility of QoS rule is 500kbit sec x 10 by IP 5000kbit sec e Remnant guarantee Bandwidth Bandwidth QoS Policy The Remnant guarantee displays as a negative number in red when the bandwidth of QoS Policy is over the WAN bandwidth Show os Table Display the QoS Policy including the L7 QoS and general QoS The L7 QoS has a higher priority then the general QoS if both overlapping Summary Windows Internet Explorer hitp 192 168 1 1 oskate_table htm Summary 9 Rule Interface Bt wae tee H ing corn ule 192 488 1 200 192 168 1 205 Upstream 100 500 Each Enabled WAN3 L QoS 21 de CINCO your future life L7 Management 2 Add New Rule Click Q Add Restrict Rule RueName e Category E Item i Category Item Delete 4 P2P Software E 4 Media Player a La Other Applications Application Define Application Define Quality of Service Cl wani O wana CJ wana O wana L use Range Mini Rate b Kbit sec Max Rate o ear Downstream Q Share total bandwidth with all IP addresses Assign bandwidth for each IP address Q Scheduling Apply this rule Always M
17. nt bandwidth General Webpage bowsing and P2P applications which occupy more bandwidth will be allocated to different WAN ports to avoid affect each other Step 1 Name the rule The name of the rule will be shown on the list so administrator could name the rule by users or usages Rule Name Per Step 2 Choose selected application b Category 4 Item 3 Category Item Delete P2P Software All P2P Software All io Media Player BitComet EasyMule PP365 Other Applications b al b al b al Application Define XFigures are used for reference Please visit the official website for the actual application support list 1 After choosing Category the Item column will show the corresponding list e Directly click on the applications to put them effective e Cancel the application by double clicks e Click Choose All to put all applications into effective and click unnecessary items for cancel e Items could be chosen in multiple categories 2 Click to drop the applications into the right column 18 d vour r future life L7 Management Step 3 confiqure selected rule Q Setting Remove traffic to another WAN when the selected interface was dropped Bind to interface Choose which interface the application or IP should be binded to Remove traffic to another WAN If this item is checked the system will direct traffic to when the selected interface another WA
18. rin the set time All time is set as the default The time frame could be modified in the following settings Q Scheduling L a Apply this rule to 24 Hour Format Everyday sun Man Tue Wed Thu Fri Sat Step 5 Click Apply to save the rule setting 25 Ka your future life L7 Management 5 Application Define When you set up the L7 Management rules not only you can select the application that is defined by Qno but also you can add your own L7 applications by the URL destination IP address or the port number You can see the Application Define feature on the Application Status Table or on the APP List of all L7 Management features xx Application Status Li Management Application Status L ee e L a p es SOWA STATUS F a s Application Define L7 Blocking Jump to 1 Page 10 entries per page L7 Application Binding BitComet Tee PER Software E asyle PP365 i B T ls Add Hew Rule Database Update Figures are used for reference Please visit the official website for the actual application support list Each function of L7 Management APP List gt gt gt Category 3 Item Category Item a Delete P2P Software All Media Player LJ Skype vaice E Other Applications SkypeOut Web Page Web Video QQ Games lt lt Application Define Figures are used for reference Please visit the official website for the actual appli
19. s is to select which user is to be controlled If only a single IP is to be restricted input this IP address such as 192 168 1 100 to 100 The rule will control only the IP 192 168 1 100 If an IP range is to be controlled input the range such as 192 168 1 100 149 The rule will control IP addresses from 192 168 1 100 to 149 Upstream Downstream Upstream Means the upload bandwidth for Intranet IP THU eric once oon bi frm Bandwidth sharing Sharing total bandwidth with all IP addresses If this option is selected all IP addresses or Service Ports will share the bandwidth range from minimum to maximum bandwidth Assign bandwidth for each IP address If this option is selected every IP or Service Port in this range can have this bandwidth minimum to maximum For example If the rule is set for the IP of each PC the IP of each PC will have the same bandwidth zx Attention If Share Bandwidth is selected be aware of the actual usage conditions and avoid an improper configuration that might cause a malfunction of the network when the bandwidth is too small For example if users do not want an FTP to occupy too much bandwidth users can select the Share Bandwidth Mode so that no matter how much users use FTPs to download information the total occupied bandwidth is fixed 24 your future life L7 Management Step 4 Make sure the time setting is correct to make the rule in effective only du
20. the IP is using webpage service the system will give VIP priority e Set source IP Group as VIP For instance if General Manager Room IP group is chosen they will have VIP priority no matter what application is used e Set VIP application and source IP Group at the same time If Webpage and General Manager Room are configured at the same time it means when general manager room use webpage service the system will give them VIP bandwidth But VIP bandwidth will not allowed when they use other network service 14 de your future life L7 Management Take a community for an example The community will ensure VIP authority when internal users browse webpage the administrator should check VIP Application and webpage at Item column Q Set Application or IP as VIP VIP Application Category 3 Item a Category Item 4 Delete Media Player 3 All 3 Other Applications Web Page H E mail E PC Anywhere L3 E Network Tools Skype Voice Other Applications SkypeOut VNC Web Page Web Video WindowsRDP QQ Games Mi vi K Application Define Figures are used for reference Please visit the official website for the actual application support list 1 After choosing Category the Item column will show the crosponding list Hint Directly click on the applications to put them effective e Cancel the application by double clicks Click Choose All to put all applications into effective and click unnecessary it
Download Pdf Manuals
Related Search