topic Can FW do QoS for override application? in General Topics

Can FW do QoS for override application?

KiCheon.Lee — Thu, 29 Aug 2013 06:20:53 GMT

Hello,

My customer use application override function for SMTP(TCP 25).

He want to apply QoS function for overriding SMTP.

Can FW do it?

Thanks.

Re: Can FW do QoS for override application?

HULK — Thu, 29 Aug 2013 06:44:19 GMT

Hello,

As per my understanding, App-override policy will only skip the Layer-7 inspection into PANFW and still QOS will be applied for that traffic. Because If security policy action is allowed, perform QoS policy lookup and assign matched QoS class.

For more information, please find below mentioned documents.

Packet Flow in PAN-OS

Hope this helps.

Thanks

Re: Can FW do QoS for override application?

Phoenix — Thu, 29 Aug 2013 17:26:30 GMT

Hello Cheon,

Here is an example of session which I tested this for you. This session is a combination of App override rule which went through QOS process.

Below it shows that the QOS was triggered for this traffic. It also shows at end class 8 in QOS took effect. Application shows its an app overriden custom app AO_-http.