<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Limit IP address range bandwidth during recurring time period in Next-Generation Firewall Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/limit-ip-address-range-bandwidth-during-recurring-time-period/m-p/1236801#M6243</link>
    <description>&lt;P&gt;Need to limit residence hall users bandwidth to Internet monday-friday 8:00 a.m. to 5:00 p.m.&lt;/P&gt;
&lt;P&gt;The following is how it was done previously on Cisco ASA. Need to translate to PA5430.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;object-group network MV_NETWORK&lt;BR /&gt;network-object 192.168.0.0 255.255.0.0&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;access-list MV_TRAFFIC extended permit ip object-group MV_NETWORK any time-range RegularHours&lt;/P&gt;
&lt;P&gt;class-map MV_BANDWIDTH&lt;BR /&gt;match access-list MV_TRAFFIC&lt;BR /&gt;&lt;BR /&gt;policy-map throttlepolicy_MV&lt;BR /&gt;class MV_BANDWIDTH&lt;BR /&gt;police output 30000000&lt;BR /&gt;police input 30000000&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;service-policy throttlepolicy_MV interface PRIMARY_CORE&lt;BR /&gt;service-policy throttlepolicy_MV interface OUTSIDE&lt;/P&gt;</description>
    <pubDate>Wed, 27 Aug 2025 15:15:47 GMT</pubDate>
    <dc:creator>ThomasMikelson</dc:creator>
    <dc:date>2025-08-27T15:15:47Z</dc:date>
    <item>
      <title>Limit IP address range bandwidth during recurring time period</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/limit-ip-address-range-bandwidth-during-recurring-time-period/m-p/1236801#M6243</link>
      <description>&lt;P&gt;Need to limit residence hall users bandwidth to Internet monday-friday 8:00 a.m. to 5:00 p.m.&lt;/P&gt;
&lt;P&gt;The following is how it was done previously on Cisco ASA. Need to translate to PA5430.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;object-group network MV_NETWORK&lt;BR /&gt;network-object 192.168.0.0 255.255.0.0&lt;/P&gt;
&lt;P&gt;&lt;BR /&gt;access-list MV_TRAFFIC extended permit ip object-group MV_NETWORK any time-range RegularHours&lt;/P&gt;
&lt;P&gt;class-map MV_BANDWIDTH&lt;BR /&gt;match access-list MV_TRAFFIC&lt;BR /&gt;&lt;BR /&gt;policy-map throttlepolicy_MV&lt;BR /&gt;class MV_BANDWIDTH&lt;BR /&gt;police output 30000000&lt;BR /&gt;police input 30000000&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;service-policy throttlepolicy_MV interface PRIMARY_CORE&lt;BR /&gt;service-policy throttlepolicy_MV interface OUTSIDE&lt;/P&gt;</description>
      <pubDate>Wed, 27 Aug 2025 15:15:47 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/limit-ip-address-range-bandwidth-during-recurring-time-period/m-p/1236801#M6243</guid>
      <dc:creator>ThomasMikelson</dc:creator>
      <dc:date>2025-08-27T15:15:47Z</dc:date>
    </item>
    <item>
      <title>Re: Limit IP address range bandwidth during recurring time period</title>
      <link>https://live.paloaltonetworks.com/t5/next-generation-firewall/limit-ip-address-range-bandwidth-during-recurring-time-period/m-p/1236866#M6244</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;
&lt;P&gt;You should read documentation about QoS first (profile applied on egress interface):&amp;nbsp;&lt;A href="https://docs.paloaltonetworks.com/network-security/quality-of-service/administration/configure-qos" target="_blank" rel="noopener"&gt;https://docs.paloaltonetworks.com/network-security/quality-of-service/administration/configure-qos&lt;/A&gt;&lt;/P&gt;
&lt;P&gt;Be careful if the firewall is a datacenter firewall because when you activate the QoS on the 54xx FW : your max bandwidth is limited...(by exemple if you have an aggregate interface made of 2 10GB int ==&amp;gt;20GB : the QoS will limit the max&amp;nbsp;bandwidth to 10GB.). As well&amp;nbsp; i strongly recommend to activate lockless QoS (&amp;nbsp;&lt;A href="https://docs.paloaltonetworks.com/network-security/quality-of-service/administration/configure-lockless-qos" target="_blank" rel="noopener"&gt;https://docs.paloaltonetworks.com/network-security/quality-of-service/administration/configure-lockless-qos&lt;/A&gt;)&lt;/P&gt;
&lt;P&gt;To answer your need, you have to configure a QoS profile first, to configure a dedicated class with max bandwidth et min,&amp;nbsp; to activate this profile on the egress interface and to create a schedule profile (Weekly). Then you have to create a QoS policy rule matching your need : Users to Internet with the schedule profile and with the class of QoS configured before.&lt;/P&gt;
&lt;P&gt;Have a good day,&lt;/P&gt;</description>
      <pubDate>Thu, 28 Aug 2025 09:55:59 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/next-generation-firewall/limit-ip-address-range-bandwidth-during-recurring-time-period/m-p/1236866#M6244</guid>
      <dc:creator>RomainSalmon</dc:creator>
      <dc:date>2025-08-28T09:55:59Z</dc:date>
    </item>
  </channel>
</rss>

