<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: QoS max egress, no effect in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/qos-max-egress-no-effect/m-p/467192#M102766</link>
    <description>&lt;P&gt;Thx for the hint. I changed the QoS rule from class 4 to 5, even then the values were strange, App and QoS rules pointing to the right traffic.&lt;/P&gt;&lt;P&gt;After using iperf to generate multiple sessions the values of the queues showed the expected behaviour.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Mon, 21 Feb 2022 12:12:58 GMT</pubDate>
    <dc:creator>Netzer</dc:creator>
    <dc:date>2022-02-21T12:12:58Z</dc:date>
    <item>
      <title>QoS max egress, no effect</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/qos-max-egress-no-effect/m-p/466144#M102655</link>
      <description>&lt;P&gt;Hi there,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I'm playing with QoS in our lab. I have a simple setup with two queue, first for SMB traffic, second for RDP traffic.&lt;/P&gt;&lt;P&gt;The max egress value is set, but when I transfer data, then both queues get bandwith values.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;What I am doing wrong here?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="PA QoS Monitor.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/39174i57F25DB4A66933DA/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="PA QoS Monitor.png" alt="PA QoS Monitor.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="PA QoS Profile.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/39171i9CE8322C73001E1C/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="PA QoS Profile.png" alt="PA QoS Profile.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-center" image-alt="PA QoS Policies.png" style="width: 999px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/39172iCE6611BB909FF12C/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="PA QoS Policies.png" alt="PA QoS Policies.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 16 Feb 2022 11:16:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/qos-max-egress-no-effect/m-p/466144#M102655</guid>
      <dc:creator>Netzer</dc:creator>
      <dc:date>2022-02-16T11:16:58Z</dc:date>
    </item>
    <item>
      <title>Re: QoS max egress, no effect</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/qos-max-egress-no-effect/m-p/466933#M102734</link>
      <description>&lt;P&gt;Hi &lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/130557"&gt;@Netzer&lt;/a&gt; ,&lt;/P&gt;
&lt;P&gt;I can think of two different reasons:&lt;/P&gt;
&lt;P&gt;1. Class 4 is always used for any traffic that does not match any of the QoS policy rules.&lt;/P&gt;
&lt;P&gt;2. You are using application&amp;nbsp; with service "any" as matching criteria for QoS policy rules&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Number One:&lt;/P&gt;
&lt;P&gt;As you can also see at the bottom when creating QoS profile. All traffic that is not explicetly tagged will use class 4&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="Astardzhiev_0-1645219003476.png" style="width: 400px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/39213i0197AA97E9AD3FE1/image-size/medium?v=v2&amp;amp;px=400" role="button" title="Astardzhiev_0-1645219003476.png" alt="Astardzhiev_0-1645219003476.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;So I am guessing that even in lab environment wher there is not lot of traffic, there is still some background noise generated by the Windows hosts. All those traffic will not match any of your QoS Policy rules, so therefor it will be tagged with Class 4&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Number Two:&lt;/P&gt;
&lt;P&gt;In order to detect the application, firewall will need to forward first couple of packets in order to gather enough information to properly identify the application. When you set the rule to use "any service port", this rule will match any traffic, until the application is identified. Since your rule for tagging with class 4 is at the top it will always be hit first, until the application is identified, so first couple of packets for each new session will be tagged with class 4. &lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I would suggest to make the following changes.&lt;/P&gt;
&lt;P&gt;- Use different class instead of class 4, this way you will not mix your test traffic with the background noise&lt;/P&gt;
&lt;P&gt;- Set service ports as "application-default" for both QoS Policy rules.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I am &lt;SPAN&gt;curious with your current setup, while you running the test traffic (rdp or transfering files)&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;- What is shown under tap Application, QoS Rules, above the graph from your screenshot?&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;- What is shown after the changes I propsed?&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Fri, 18 Feb 2022 21:35:16 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/qos-max-egress-no-effect/m-p/466933#M102734</guid>
      <dc:creator>aleksandar.astardzhiev</dc:creator>
      <dc:date>2022-02-18T21:35:16Z</dc:date>
    </item>
    <item>
      <title>Re: QoS max egress, no effect</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/qos-max-egress-no-effect/m-p/467192#M102766</link>
      <description>&lt;P&gt;Thx for the hint. I changed the QoS rule from class 4 to 5, even then the values were strange, App and QoS rules pointing to the right traffic.&lt;/P&gt;&lt;P&gt;After using iperf to generate multiple sessions the values of the queues showed the expected behaviour.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 21 Feb 2022 12:12:58 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/qos-max-egress-no-effect/m-p/467192#M102766</guid>
      <dc:creator>Netzer</dc:creator>
      <dc:date>2022-02-21T12:12:58Z</dc:date>
    </item>
  </channel>
</rss>

