Blocking Torrent

  • 1
  • Question
  • Updated 5 years ago
  • Answered
Hi,

I have a user who daily makes downloading 5gb. We identified that the download is torrent. Is there any way to block torrent in HiveManager?
I can do QoS for only one user?

Grateful Thiago
Photo of THIAGO SANCHES BRAMBILA

THIAGO SANCHES BRAMBILA

  • 22 Posts
  • 0 Reply Likes

Posted 5 years ago

  • 1
Photo of Bradley Chambers

Bradley Chambers, Champ

  • 302 Posts
  • 53 Reply Likes
Hi,

On the access points with 6.02r2, yes. Inside of the User profile firewalls, you can block the Bit torrent service. What version of HiveManager / AP firmware are you on?
Photo of THIAGO SANCHES BRAMBILA

THIAGO SANCHES BRAMBILA

  • 22 Posts
  • 0 Reply Likes
Hello Bradley, thank you for reply

So I'm using firmware version 5.1r4, early May we will migrate to the latest version.
Photo of Jim Wang

Jim Wang

  • 2 Posts
  • 0 Reply Likes
How effective is the blocking feature? Can it block torrent app that changes from TCP to UDP for data transfers and uses port 80 for setup? -Jim
Photo of Andrew Garcia

Andrew Garcia, Official Rep

  • 368 Posts
  • 120 Reply Likes
Aerohive QoS policies are applied at the User Profile level. To apply QoS to only one user, that user would need to get mapped into his own user profile. There are a couple ways to try to do that.

How are you authenticating users? Depending on how you authenticate clients, you may be able to give this user a unique user profile. If using 802.1X/EAP with a RADIUS server, the RADIUS server can return a different attribute for the user to assign a different user profile. If using PPSK, you could map this user into a distinct Local User Group, and assign a different user profile that way.

Or, if you know the user's device MAC addresses, you can do a client classification rule that assigns a unique user profile to his devices.
Photo of THIAGO SANCHES BRAMBILA

THIAGO SANCHES BRAMBILA

  • 22 Posts
  • 0 Reply Likes
Hello Andrew, thank you for reply.

In the scenario, I have two SSIDs, one configured with 802.1x with another PPSK.

Users of 802.1x SSID, belong to my domain (Active Directory), my biggest problem is the user's SSID PPSK who are users of outsourced companies who provide services to us, these users are consuming too much bandwidth.

I already have this user group, how do I assign only that group?

Thank you very much
Photo of Andrew Garcia

Andrew Garcia, Official Rep

  • 368 Posts
  • 120 Reply Likes
Presumably, you are using a different user profile for each SSID. Given that, you can assign different firewall and QoS/policing rules to each user profile.

If you are using the same user profile for each SSID, then you would need to create a new one used for the PPSK network.

By any chance are you using express mode? If you look in the top right corner, under the HiveManager icon, you will see your version information.

To support multiple user profiles, you would need to move to Enterprise mode. If you need to move to Enterprise mode, browse to Home > Device Management Settings. Click Enterprise, fill in a PSK QuickStart password and click Update.

Keep in mind, the move to Enterprise is a one way transition, so take a backup before switching.
Photo of irldexter

irldexter

  • 37 Posts
  • 1 Reply Like
Please see http://community.aerohive.com/aerohiv... regarding the capability of Aerohive to identify torrents i.e. not able to. Might be better to slow user to a point where they can't hurt others.
Photo of THIAGO SANCHES BRAMBILA

THIAGO SANCHES BRAMBILA

  • 22 Posts
  • 0 Reply Likes
Gentlemen, thank you all for the answers

I think initially I upgrade the firmware manager. Today we are using version 5.1r4 HiveManager Enterprise, and has several features that could help me. I will schedule a date and send the results.

Thank you

Thiago Brambila