Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am new to networking so pardon if this is a stupid question.

I want to see how my users use the internet bandwidth. I have around 50 Users in the network and I am using a checkpoint edge series firewall as a gateway for the internet. Checkpoint does not provide any report related to bandwidth utilization so I am looking for a another server to place between the firewall and the LAN switch to monitor the bandwidth(Sever monitors the interfaces while forwarding traffic back and forth).

Is that possible to do?. If possible please suggest me some tools. Or are there any other ways to monitor the internet usage of my users?.


share|improve this question
Did you check with Checkpoint? They make multiple tools/software to do this, as do other 3rd parties such as Solarwinds, etc. – TheCleaner Feb 10 '13 at 17:41
mrtg, pastmon are obvious candidates. – symcbean Feb 11 '13 at 1:13
darkstat may be appropriate. – mgorven Feb 11 '13 at 21:35
@TheCleaner I tried SNMP it shows the total bandwidth of the interface not by individual users. I tried Solaris as well as preasler. Both does the same. Do you know any application for IP base bandwidth monitoring with SNMP? – Learner Feb 13 '13 at 8:24
@symcbean I checked them definitely try them out when I find some free time. Thanx alot. – Learner Feb 13 '13 at 8:25

I am sure you can get the utilization of the specific port of the firewall if you enable SNMP.

However your best bet here is to use something like Squid as a proxy server between the firewall and the users. You then need to setup all computers to connect to the internet via the proxy server (the most easy way to do this is with a GPO if you are running Windows). This will allow you to:

  • Control which websites your users are allowed to access.

  • Generate a report of what websites the users are visiting and how much traffic they are using. A good tool for this is SARG. Very easy to setup and use.

  • Block ads, this saves ALOT of bandwidth.

There is plenty of documentation around for setting up Squid and SARG is literally an apt-get/yum and then edit the simple configuration file.

share|improve this answer
Thanx for the nice idea. I will definitely try your solution. – Learner Feb 13 '13 at 8:21

Checkpoint makes multiple software "blades" that interact with their firewall gateways.

See here:

and then look at the software to see which one(s) will get you what you are looking for.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.