using traffic management you can take the traffic of a specific ip (not user) to a pipe, via snmp the firewall take stats of the traffic passing the pipe use some snmp software like the dude or nagios to collect that snmp statistics
otherwise you can create a authentication scenario sending accounting data to a radius accounting server but that scenario its only theorical has to be probed