QoS Question

[tohoken]

All,

I am trying to wrap my head around QoS and how it functions.  What I want to do is to limit the download rate of streaming media.  I understand the rule creation and placement.  I assign my QoS policy to my trusted zone interface so that the download will be controlled.  What I am having a hard time understanding is how this really controls bandwidth usage?  The media stream will come down full speed and when it gets to my Palo Alto box it will be throttled to my QoS setting and sent to the user.  If my goal is to control bandwidth usage of my Internet connection, how does this help?  The stream will come down full speed and use as much bandwidth as necessary.  Am I missing something?

Ken

[skrall · Accepted solution]

Our QOS ques packets as they exit the box. If you want to restrict traffic from the internet to the "Trusted" or "Inside" zones, you would need a second QOS rule on the "Trusted" Interfaces.  One QOS for traffic to the internet and another for the internet to inside. They may be the same polices. But ususally the WAN side has a lower bandwidth. If you do not specify a MAX Bandwidth for the interface, QOS assumes the negotiated link speed is the MAX.

Steve Krall