topic Re: trafic shaping in General Topics

trafic shaping

Lahcen — Mon, 17 Mar 2014 11:06:18 GMT

Hi All,

Please I need to prepare a document about QoS epecially about traffic shaping on PAN-500 PaloAlto firewall. so I need to know the following points:

Is traffic shapping and QoS is configured based on porcentage or on the amount of bandwidth (i.e: 500kbps) per user or per application, if someone can send me a document regarding this item I would be grateful.

Thanks in advance,

Re: trafic shaping

Retired Member — Mon, 17 Mar 2014 11:14:58 GMT

documet will help you

https://live.paloaltonetworks.com/docs/DOC-3439

You can assign maximum and guarantee bandwith limits for each class(8 classes) and assign them to related traffic.

Re: trafic shaping

Lahcen — Wed, 19 Mar 2014 15:18:51 GMT

Hi panos :

according to this document we can not perform trafic shapping in PA-500 or i'm wrong? if it's the case is there any other solution we can do to do traffic shapping per user or per application or even per interface

Re: trafic shaping

jburugupalli — Wed, 19 Mar 2014 15:51:41 GMT

Hello Lachen,

tech note indicates 500 series devices is not able to support policing but does perform traffic shaping. Policing is performed to avoid unintentional starvation of the QoS priority queues.

All platforms support shaping, which is at the egress interface only. In PA-200/500 and PA-2000 Series devices, Shaping is performed in software only. However, in PA-4000/5000 Series devices, Shaping is performed in hardware.

Qos rules matches exactly what is configured in that rule and apply Qos profile matching the rule exactly like security policies. If we you apply Qos policy for set of users,Qos profile and Qos class matching the rule will be applied only for that users. And if you want you also can enable Qos policy only at certain time range by using the schedule feature.

Regards,

Jahnavi.