topic Re: PA200 stops forwading traffic in General Topics

PA200 stops forwading traffic

iweltag — Thu, 26 Nov 2015 13:52:36 GMT

Hi,

we have a pa200 (6.0.8) whichs suddenly stops forwarding traffic. So we had to reboot the device via managment UI to fix the problem. After doin some research i found this knowledge article from palo alto:

https://live.paloaltonetworks.com/t5/Management-Articles/Firewall-Slows-Down-and-Stops-Forwarding-Traffic-after-Applying/ta-p/59213

Since we have Qos enabled (and running fine with qos config for 3 or 4 months) for voip i am not sure if we run into this problem? Here are my voip class which is attached to the interfaces for cleartext traffic.

Should i add "class4" into my VOIP Rule or should i add an extra qos policy for class 4 traffic (from any to any --> class 4)? But i thought thats the default behaviour from a palo alto (Traffic which is not assigned to a qos class is automatic class 4).

Thank you.

Re: PA200 stops forwading traffic

Raido_Rattameister — Thu, 26 Nov 2015 14:16:52 GMT

I would add class 4 to your VOIP profile aswell as class 4 is default class where traffic is placed if no QoS policy applies to it.

Re: PA200 stops forwading traffic

VinceM — Thu, 26 Nov 2015 14:30:36 GMT

Hi,

Raido is right.

Class 4 is the default one for all traffic which doesn't match any QoS rule.

Then no chance for you, it's the only class you can't use in your case 🙂

Just chnage it.