qos rule allowed application is http-video but stats and cli also shows unknown-tcp

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
Cyber Elite

qos rule allowed application is http-video but stats and cli also shows unknown-tcp

 

I have configured qos on application http-video  only and category is any.

Running OS 8.0.9

 

On qos stats graph it also shows application as unknown-tcp

from cli  when i run command

 

> show session all filter qos-class 1

 

it shows application as undecided

 

need to understand qos rule only applies application http-video why we see applications unknown-tcp in gui and

undecided in cli?

MP
Highlighted
Cyber Elite

@MP18,

The QOS profiles will utilize an application cache so that the firewall properly applies QoS before the application is actually identified, based on the source-address, the destination-address, and the application that was previously identified. The unknown-tcp status likley modifies to the correct application once enough traffic has passed to properly identify the application. 

The same thing is true for the 'undecided' that you're seeing on the CLI. It simply means that not enough traffic has passed to actually identify any application just yet. 

Highlighted
Cyber Elite

Thanks for reply.

 

so it is normal to see the app as unknown-tcp  in gui of qos if new connections are coming in based on the source ip?

 

once the connection from new user comes firewall identify the app then it will change to the http-video right?

MP
Highlighted
Cyber Elite

@MP18,

Depends on what you are trying to trigger on, but I would say that http-video from an application level I wouldn't be shocked. 

Once the firewall is able to properly identify the profile it would switch to http-video. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!