topic Is it possible it configure Qos with Global protect. in General Topics

Is it possible it configure Qos with Global protect.

bit_byte — Wed, 22 Apr 2020 07:01:38 GMT

Behind the firewall, we have 3 servers which access by the remote user.

We want to prioritize servers service so the remote user(connected with Global protect) access this server on optimize way @Reaper

Re: Is it possible it configure Qos with Global protect.

reaper — Wed, 22 Apr 2020 08:24:25 GMT

Hi @bit_byte

In the QoS interface configuration, in the second tab (cleartext traffic) you can add source networks with their own profile, you can add one for the vpn users' up pool to the servers

Re: Is it possible it configure Qos with Global protect.

bit_byte — Wed, 22 Apr 2020 09:24:39 GMT

3 server(behind the firewall) -------firewall(lease line) <-----ipsec vpn (Global protect)

how would we set DNAT rule here

Re: Is it possible it configure Qos with Global protect.

reaper — Wed, 22 Apr 2020 10:50:00 GMT

From vpn ippool to <preNATzone> preNATaddress translate to privateIPsrv1

Repeat for srv2 and srv3