NxFilter Tutorial
Tutorial Index

User level data cap by NxFilter
You can implement user level data cap by NxFilter and NetFlow.


Using NetFlow
NxFilter supports a user level data cap by utilizing NetFlow data from a router. NxFilter can associate NetFlow data to a user login IP address and if there is a user consumed up data over the limit you set on a policy, NxFilter blocks all the DNS requests from the user.

To enable data cap, you need to have a router or firewall supporting NetFlow version 5 in your network and you need to make it sending NetFlow data to NxFilter. And then run NxFilter's built-in NetFlow collector on 'System > Setup > NetFlow'. After that, you can set data cap on a policy.

There are several rules for NxFilter to import NetFlow data. Firstly, one of the source or destination IP address of a NetFlow data should be associated to an IP address of a logged-in user on NxFilter. Secondly, NxFilter ignores internal traffic. And one of the source or destination IP address needs to be a public IP address. This is because you are only interested in inboud or outbound traffic from/to the Internet. And lastly, NxFilter keeps only TCP/UDP  data.

Currently, NxFilter supports NetFlow v5 only.