article Nominated Discussion: Understanding QoS in General Articles

article Nominated Discussion: Understanding QoS in General Articles https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-understanding-qos/ta-p/561124 <DIV class="lia-message-template-content-zone"> <P><SPAN>tags: next-generation firewall, network security, routing, QoS, advanced administration</SPAN></P> <P> </P> <P><SPAN>This Nominated Discussion Article is based on the post "</SPAN><A href="https://live.paloaltonetworks.com/t5/general-topics/confused-about-qos-on-palo-need-some-assistance/m-p/559217" target="_blank" rel="noopener"> Confused about QoS on Palo, need some assistance</A><SPAN>" by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/317939">@latechguy</a>    and</SPAN><SPAN> answered by Cyber Elite <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/77347">@TomYoung</a>  Read on to see his response!</SPAN></P> <P> </P> <BLOCKQUOTE> <P>My understanding is that QoS only really applies to egress.</P> <P>The issue I faced this week was with Apple updates killing the ingress and impacting sip trunks.</P> <P>Egress didn't appear to be an issue.</P> <P> </P> <P>Now with that said, would applying QoS within our Palos help in any way when it comes to the sip trunks if the issue is with ingress being saturated?</P> <P> </P> <P>What could you possibly do in this case?</P> </BLOCKQUOTE> <P> </P> <P>Yes!  This can be done.  See the 2nd paragraph in this article.  <A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClS0CAK" target="_blank" rel="noopener">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClS0CAK</A></P> <P> </P> <P>" <EM>An important concept to keep in mind is that a QoS profile is applied on the egress interface of a packet that is traveling through the firewall. This would mean, for example, that to limit upload, a QoS profile needs to be enabled on the untrust interface and to limit download, a QoS profile needs to be enabled on the trust interface.</EM> "</P> <P> </P> <P>You can limit your untrust ingress by applying policy to your trust egress, especially with TCP-based traffic, which will decrease the sliding window based upon packet loss.  The article also has good stuff for your SIP trunks.</P> <P> </P> <P>Thanks,</P> <P> </P> <P>Tom</P> <P> </P> </DIV> Wed, 11 Oct 2023 15:35:18 GMT JayGolf 2023-10-11T15:35:18Z Nominated Discussion: Understanding QoS https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-understanding-qos/ta-p/561124 <P>This Nominated Discussion Article is based on the post " Confused about QoS on Palo, need some assistance".</P> Wed, 11 Oct 2023 15:35:18 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-understanding-qos/ta-p/561124 JayGolf 2023-10-11T15:35:18Z