A customer has a network structure shown in the following figure. The Internet line bandwidth is 10 Mbps, and the customer has about 500 intranet users accessing the Internet. Because of the limited Internet access bandwidth and some users downloading or watching movies online during business hours, website access is slow, affecting work efficiency.

The customer purchases Sangfor 's IAG and wants to implement the following configuration:

1. Deploy the IAG without changing the original network environment if possible.

2. Bind IP addresses with MAC addresses so that employee cannot change their IP addresses.
3. Disallow employees to download P2P files or watch streaming media during business hours, disallow them to access illegal or unhealthy websites, and audit employees' behaviors of sending emails (through webpages or clients), posting content on forums, posting microblog content, and sending QQ messages.
4. Not to control the Internet access behaviors of the director team but to audit the behaviors.
5. Ensure website access bandwidth at all times. Allocate at least 60% of the bandwidth for this purpose. Limit the bandwidth for P2P, download, and online streaming media applications to 20% or less.