How to Limit AnyConnect Bandwidth Per User

This section provides instructions to limit the maximum bandwidth consumed by VPN users when the users connect using the Cisco AnyConnect VPN client to Firepower Threat Defense remote access VPN gateway. You can limit the maximum bandwidth by using a Quality of service (QoS) policy in Firepower Threat Defense, to ensure that a single user or group or users do not take over the entire resource. This configuration lets you give priority to critical traffic, prevent bandwidth hogging, and manage network. If a When traffic exceeds the maximum rate, the Firepower Threat Defense drops the excess traffic.

Do This

More Info

Step 1

Create and set up a realm.

Create and Set up an Active Directory Realm.

Step 2

Create a QoS policy and QoS rule for the user or group available in the newly created realm.

Create a QoS Policy and Rule

Step 3

Configure a remote access VPN policy and select the newly-created realm for user authentication.

Create or Update a Remote Access VPN Policy

Step 4

Deploy the remote access VPN policy.

Deploy Configuration Changes