topic Re: qos rule allowed application is http-video but stats and cli also shows unknown-tcp in General Topics

qos rule allowed application is http-video but stats and cli also shows unknown-tcp

MP18 — Wed, 07 Nov 2018 03:48:37 GMT

I have configured qos on application http-video only and category is any.

Running OS 8.0.9

On qos stats graph it also shows application as unknown-tcp

from cli when i run command

> show session all filter qos-class 1

it shows application as undecided

need to understand qos rule only applies application http-video why we see applications unknown-tcp in gui and

undecided in cli?

Re: qos rule allowed application is http-video but stats and cli also shows unknown-tcp

BPry — Wed, 07 Nov 2018 17:24:54 GMT

@MP18,

The QOS profiles will utilize an application cache so that the firewall properly applies QoS before the application is actually identified, based on the source-address, the destination-address, and the application that was previously identified. The unknown-tcp status likley modifies to the correct application once enough traffic has passed to properly identify the application.

The same thing is true for the 'undecided' that you're seeing on the CLI. It simply means that not enough traffic has passed to actually identify any application just yet.

Re: qos rule allowed application is http-video but stats and cli also shows unknown-tcp

MP18 — Wed, 07 Nov 2018 17:33:35 GMT

Thanks for reply.

so it is normal to see the app as unknown-tcp in gui of qos if new connections are coming in based on the source ip?

once the connection from new user comes firewall identify the app then it will change to the http-video right?

Re: qos rule allowed application is http-video but stats and cli also shows unknown-tcp

BPry — Wed, 07 Nov 2018 20:33:46 GMT

@MP18,

Depends on what you are trying to trigger on, but I would say that http-video from an application level I wouldn't be shocked.

Once the firewall is able to properly identify the profile it would switch to http-video.