Athena SWG (Secure Web Gateway)

Athena SWG (formerly Internet Access Gateway) ensures visibility and control across the network, detecting risks like unauthorized access, non-compliant activities, and data leaks to manage endpoints.
{{ $t('productDocDetail.guideClickSwitch') }}
{{ $t('productDocDetail.know') }}
{{ $t('productDocDetail.dontRemind') }}
13.0.120
{{sendMatomoQuery("Athena SWG (Secure Web Gateway)","Flow Quota")}}

Flow Quota

{{ $t('productDocDetail.updateTime') }}: 2025-12-29

In the previous article, we completed the limited BM channel configuration as required. Next, you only need to configure the traffic quota policy and call the traffic-limited BM channel in the policy.

Scenario:

An enterprise requires that the marketing department's daily Thunder downloads and P2P downloads cannot exceed 1G, and the total number of downloads per month cannot exceed 30G, so configure the traffic quota strategy as required.

Configuration steps:

Step 1.Navigate to Bandwidth Management > Quota Control and click Add > Quota Control. In the pop-up Quota Control window, select Enabled, and fill in the policy name and description information.

Step 2.Select Flow Quota and configure the flow quota parameters.

In this example, the quota is configured for the Thunder downloads and P2P downloads of marketing personnel. The quota is up to 1G per day and 30G per month. Therefore, check the Period column in the Flow Quota Per User column as all day. You can set the period consistent with the custom time period configuration method in the traffic channel above. Click Application and check all P2P applications in the pop-up Select Application. Fill in 1GB for daily quota and 30GB for monthly quota.

Step 3.In the Action If Threshold is Reached column, you can configure the following three penalties for users who exceed the duration quota.

Select to send an alert message by email to notify the administrator that the user has oversubscribed information (this function requires the IAG to complete the docking with the company's mailbox system to send the alarm email normally).

Select to remind users who are about to exceed or exceed their quota and inform the user that his time quota is about to be exceeded.

Choose to add excess users to the limited BM channel or prohibit excess users from surfing the Internet. Suppose you need to penalize oversubscribed users through a limited BM channel. In that case, you need to configure the limited BM channel in Bandwidth Control in advance, and then select Apply limited BM Channel on the Other action page, and then select the corresponding penalty. The channel imposes penalties on excess users.

Step 4.In the Quota Control column, click Objects to select the target of the quota policy to take effect. This example aims to limit the P2P downloads of marketing personnel, so select marketing personnel in the applicable objects.

Step 5.Click Advanced. Advanced configuration includes Expiration Date, Privilege of Admin in Same Role, and Give view privilege to administrator in lower-level role.

Step 6.After completing the configuration, the quota policy will be shown in the quota control list.