Athena SWG (Secure Web Gateway)

Athena SWG (formerly Internet Access Gateway) ensures visibility and control across the network, detecting risks like unauthorized access, non-compliant activities, and data leaks to manage endpoints.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
13.0.120
{{sendMatomoQuery("Athena SWG (Secure Web Gateway)","Guaranteed Channel")}}

Guaranteed Channel

{{ $t('productDocDetail.updateTime') }}: 2025-12-29

It is to ensure the use of essential applications. Setting the minimum bandwidth value ensures that the bandwidth occupied by specific data types is not less than a particular value, ensuring that important applications can have the bandwidth when the line is busy.

Scenario:

A company leased a 20Mbps telecommunication line, with 1,000 Internet users on the intranet. According to the company's business needs, it is necessary to ensure that the bandwidth of the finance department when accessing online banking websites and sending and receiving email data cannot be less than 2Mbps when the line is busy, but the maximum cannot exceed 5Mbps.

Configuration Steps

  1. Guarantee channel configuration

Step 1.Enter Bandwidth Management > Edit Line Bandwidth. Set Outbound and Inbound to 20Mbps.

Step 2.Enter Bandwidth Management > Bandwidth Channel[A104], and check Enable Bandwidth Management System (the screenshot below shows two lines, we only focus on the first line).

Step 3.Under Bandwidth Channel, click Add > Parent Channel, and select the Guaranteed channel. Enter the channel name. “/”means it is a root channel, and you can create a child channel under the root channel.

  1. Bandwidth Channel Configuration

Under Channel Type, select Guaranteed channel. Fill in the inbound and outbound bandwidth.

Channel: Set the target line, bandwidth channel type, restricted or guaranteed bandwidth, and the bandwidth that a single user can use.

Target line: It is to select the applicable line of the channel. The channel will be matched when the data goes through the selected line. This example has only one line, so select Line 1 for Target Line.

Channel Type: Used to select the channel type (Guaranteed Channel or Restricted Channel) and define the bandwidth value. In this example, it is necessary to guarantee the bandwidth for the personnel of the Finance Department to visit the Internet banking category website and send and receive email data to ensure at least 2Mbps and not more than 5Mbps. Check Guaranteed Channel, set Outbound Bandwidth, Inbound Bandwidth, Min, and Max of bandwidth are 20% and 50% of the total bandwidth. If the total bandwidth is 20Mbps, the guaranteed bandwidth is 2Mbps, and the maximum bandwidth is 5Mbps.

Priority: Divided into high, medium, and low, it refers to the priority of this channel occupying idle bandwidth when other channels are idle.

Max Bandwidth Per User: Limit the bandwidth occupied by a single user matching this channel. In this example, there is no need to limit the maximum bandwidth of a single user, so do not check here.

Advanced: Take every WAN IP as a channel user so that it can share bandwidth with LAN users equally and comply with Max Bandwidth Per User (this is often selected for a server providing external service)

  1. Objects

Step 1.Click Objects in Options, and set the application and target users for the channel in the Objects column. In this example, bandwidth is guaranteed for the personnel of the Finance Department to access online banking websites and send and receive email data, so the applicable applications and applicable objects need to be customized.

Step 2.Customize the application for the channel. Select Specified in the Application column. (Checking All applications means that the channel is valid for all data types).

Step 3.Click Select to check specific application types. Select the application type and website type in the pop-up box Select Applications.

In this case, you need to visit the website of the Internet banking category and the data for sending and receiving emails for bandwidth guarantee, then select the application here: email/all, online banking/all, visit website/finance/online payment, visit website/finance/bank website.

Step 4.Customize the channel-applicable objects. Select Specified on the right side of the Object column. (Checking All users means the channel is valid for all users).

Step 5.Click the blue font User button and select the specified object in the pop-up box Objects. In this example, the bandwidth guarantee is required for all the Finance Department users.

Step 6.Configure the effective period of the channel in the Schedule column. The administrator can customize the effective period according to the working hours of the enterprise. Click Add Schedule in the Schedule column to start customizing the effective period of the strategy, and click Add to add the execution channel time.

Step 7.If the effective channel date is preset, click the Setting button behind the Date column to add or exclude a period. After setting, click the OK button, and finally click OK[A105].

Step 8.Configure the Destination of the strategy, which can be used in conjunction with the Users in the Objects above. In this case, the channel has been set in Applicable Users to be effective for financial personnel so that you can define Destination as All.

If you need to make more specific restrictions on IP, you can customize the IP address segment. Click Add IP Group in the Destination column. Then customize the effective IP address segment of the channel under the pop-up Add IP Group menu.

After completing the setting, the display is as follows.

Step 9.The set channel will appear in Bandwidth Channel. The channel configuration is complete.

1. The total percentage of guaranteed bandwidth channels may exceed 100%. When it exceeds 100%, the minimum bandwidth value of each guaranteed channel will be reduced proportionally. For example, suppose we set up two channels; the first guaranteed bandwidth is set to 30%. In that case, the second is set to 90%, the first is allocated to 30/(90+30)%, which is 25%, and the second is allocated to 90/(90+30)%, which is 75%.

2. Priority: When our actual bandwidth is free, the higher the priority, the more free bandwidth is occupied.