is qos marking in security policies automatically applied bidirectionaly?

[CMG]

e.g If there is a security policy applied from just "untrust to trust" permitting Citrix traffic and giving it DSCP marking of AF4x .. will the return traffic from the connection that is flowing back from "trust to untrust" have the same AF4x DSCP marking automatically applied when it exits the untrust interface?  or does that require another explicit policy for marking "trust to untrust"?

Regards,

[shasnain · Accepted solution]

Yes, its going to apply bidirectionally.

Thanks,

Syed R Hasnain