SonicWall TZ 205 BWM settings for RD Gateway (SBS 2011)

We have a client using SBS 2011 with a separate Remote Desktop server on Server 2012 at the main office. Users from a branch office RDP through the SBS RD Gateway to use the Remote Desktop server. Every so often the branch office users complain about sluggish connectivity to the remote server. Can anyone recommend, in detail, the best settings on their main office TZ 205 firewall, in terms of bandwidth management, to optimize traffic for the RD Gateway while still leaving enough resources for normal web browsing, SMTP, and the branch office VPN?

Thanks!
LVL 2
MISquaredAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Aaron TomoskyDirector of Solutions ConsultingCommented:
IMO The easiest way to use bwm on a sonicwall is to find the firewall rule for wan to lan for the rds server and mark it as high. Set your high medium and low bwm values. Make sure you set the inbound and outbound speeds on the wan interface.

What is your wan speed? Do you use GAV, Ids or content filtering?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MISquaredAuthor Commented:
Thanks, Aaron.

So...
Under Firewall Settings > BWM,  I can change the BWM type to WAN, Global, or None. Should I choose Global here?

Under Firewall > Access Rules, I have rules for HTTP, HTTPS, and an RWW specific rule for port 987. There is a tab called Ethernet BWM. When I set BWM type (above) to WAN, the settings I change in Ethernet BWM under Access Rules do not stick. So, I'm guessing I need to set that to Global. When I choose this, I get a daunting message about BWM settings being reset on all Access Rules. I don't figure this will be a problem though since I don't have any BWM settings for any of the Access Rules yet.

Any thoughts on that?

Thanks!
Aaron TomoskyDirector of Solutions ConsultingCommented:
Correct, set it to global and don't worry about the warning.
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Get the Guide
MISquaredAuthor Commented:
Ok, set it. I'll see how it goes for a day or so.

To answer your other question. There is GAV, Content Filtering, and IPS running on the SonicWall, but these problems have been going on since before those services were enabled. Ultimately, I think the issue is on the end of the branch office, but I wanted to eliminate possibilities.
Aaron TomoskyDirector of Solutions ConsultingCommented:
I ask because the tz205 with all the security running will likely have problems with more than a 10mbit connection
MISquaredAuthor Commented:
It's closer to 18. Do you know if it's possible to omit that traffic, by service or IP, from being scanned by those services? I'll poke around to see what I can find out.
Aaron TomoskyDirector of Solutions ConsultingCommented:
so not only can gav, ids, and content filtering be enabled or disabled entirely, but they can be enabled per direction per interface. If you can find some off-business-hours time, run a speedtest with how it is now. Disable all security features and run a speedtest. Plug a laptop directly into the internet line, run a speedtest.

Here is a good doc on enabling some fairly tight security on a sonicwall
https://support.software.dell.com/kb/sw12434
MISquaredAuthor Commented:
I'll check it out. Thanks for all your help. I appreciate it.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.