4 Replies Latest reply on May 15, 2014 12:04 AM by NetTas

    Need Volume Quota Explaination

    Haaris Faizan

      I have restricted the volume quota per day limit to 10 MB for a client machine IP but when that client machine download any file >10 MB i.e.100 MB or more than that why its not getting blocked....

       

      If suppose he doesnt download any file & only access webpages of sites which will make size more than 10 MB then what happens?????

       

      Could you plz explain the real working of volume quota......

        • 1. Re: Need Volume Quota Explaination

          Hello Haaris -

           

          In your screenshot, I see the criteria for this rule set is wrong. Below is the default criteria....

           

          Volume quota criteria.png

           

          ...correct this and try re-testing -- thanks--

          • 2. Re: Need Volume Quota Explaination
            Haaris Faizan

            I had already tried with the default ruleset(You can see in below attached screenshot),but its not working....

             

            Secondly,why it is wrong if i use AND option it think it varies with  requirement...Volume.jpg

            • 3. Re: Need Volume Quota Explaination

              Since it is not working with the default criteria, then the best thing to do next is to run a rule engine trace while reproducing:

               

              Rule Engine Tracing

              https://community.mcafee.com/docs/DOC-5201

               

              -- the rule engine trace will at least answer the fundamental question of "does my test client even match on the desired rule criteria?"

               

              Definitely open a ticket with support if you would like for us to analyze the traces, as it is not recommended to post such info here.....

               

              Rule of engagement: Attachments

              https://community.mcafee.com/community/business/email_web/webgateway/blog/2013/0 8/01/rule-of-engagement-attachements

               

              --thanks--

              • 4. Re: Need Volume Quota Explaination
                NetTas

                If I can make a comment - might be wrong but we have the same problem for which there is no real solution.

                 

                The Volume Quota for User or IP is recorded in quota.db, and records the size of the file After Download (using Body.Size).

                Problem is ( using example) if the URL/file downloaded is 100 Megs and the Volume Quota is 10 megs, if when the IP started the download with a current Quota under 10 Megs (say 5 megs)  then the file will be downloaded.

                After the file is download then the Quota setting  for this IP will be 105 Megs.

                Thus you can set a Volume Quota of 1 Meg and still potentialy download 2 Gigs in a single day.

                 

                We have a work-around by having Daily, Weekly and Monthly Volume Quota settings - thus a heavy day is captured by Daily , Weekly, and Monthly settings - thus if little Johnie does download a 2 Gig file today with a 10 Meg Daily setting, he's out for the rest of the week/month. This is not perfect but helps.

                 

                Hope this is of assistance.