Athena SWG (Secure Web Gateway)

Athena SWG (formerly Internet Access Gateway) ensures visibility and control across the network, detecting risks like unauthorized access, non-compliant activities, and data leaks to manage endpoints.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
13.0.120
{{sendMatomoQuery("Athena SWG (Secure Web Gateway)","Overview")}}

Overview

{{ $t('productDocDetail.updateTime') }}: 2025-12-29

Bandwidth management manages and identifies the network traffic of different users and applications. The bandwidth assurance and bandwidth limitation functions are provided.

The bandwidth assurance function is to ensure bandwidth allocation to important applications.

The bandwidth limitation function limits the total upstream and downstream bandwidth and the bandwidth of each application for all users, local users, domain users, domain security groups, domain attributes, user attribute groups, source IP addresses, locations, wireless networks, or endpoint types.

The traffic sub-channel function is also provided for you to create traffic sub-channels for better channel traffic allocation.

Bandwidth Management enables:

  1. Dynamic bandwidth allocation to important Internet applications
  1. Limiting the bandwidth allocated to Internet applications
  2. Controlling the maximum bandwidth available to each IP address
  3. Even bandwidth allocation among IP addresses within the same channel Basic concepts:

Traffic channel: The entire bandwidth is divided, based on service types and user groups under access control, into multiple parts, and each part functions as a traffic channel. Traffic channels are classified as bandwidth assurance channels and bandwidth limitation channels.

Bandwidth limitation channel: The maximum traffic rate of the channel is specified. When the network load is heavy, the bandwidth allocated to the channel does not exceed the specified value.

Bandwidth assurance channel: The maximum bandwidth and minimum bandwidth of the channel are specified. When the network load is heavy, the bandwidth allocated to the channel is not less than the specified minimum value.

Traffic sub-channel: A traffic channel hierarchy is created. Traffic sub-channels are used to further separate traffic channels for better bandwidth management.

Limited BM channel: It works with Quota Control Policy to impose a penalty after a user exceeds a quota. Configure the penalty for the limited BM channel. Generally, a small amount of bandwidth is allocated to the limited BM channel.

Line Bandwidth Allocation: It is to specify the allocation of upstream and downstream bandwidth to Internet lines. Suppose the IAG is deployed in bridge mode. In that case, you must set the actual Internet line bandwidth of the front-end gateway because the bandwidth for the bandwidth limitation channel and the bandwidth for the bandwidth assurance channel are set to a certain percentage of the Internet line bandwidth.

Virtual line: It is used in the bridge mode to divide one physical line into multiple virtual lines for Bandwidth Management channel configuration.