I am experiencing speed issues that I believe may be related to the current QoS configuration on my PA-3020 firewall. I currently have 2 different QoS classes defined: Class 1 & 2. I have three applications under class 1, and one application under class 2. However, under the QoS profile assigned to my outbound internet links, I have an additional 2 classes defined. I have class 4 assigned with a guaranteed egress of 250mbps, and class 5 with a guaranteed egress of 49mbps.
I am wondering if these 2 additional classes still have bandwidth set aside for them (250mbps & 49mbps), despite the fact that there are no applications defined as class 4 or 5.
PAN-OS is 8.0.9
Thanks in advance.
(If possible it would probably be easier if you share screenshots of your QoS policy, QoS profile and the interface QoS configuration)
Thank you for your response.
What speed issues do you have exactly? Could you explain a little more? Are these issues constantly, randomly, mostly at specific times or only on weekdays or als on the weekend?
What I see in your screenshots is that you don't really have a bandwidth limitation for incoming traffic configured. So theoretically 1 user (connected with Gbit) could utilize the full bandwidth on both ISP links with 2 big downloads.
QoS on Paloalto firewalls is only applied on egress interface. So even a user connects to Microsoft for downloading updates (your QoS policy 3), the big data transfer is incoming and not outgoing, the most of the traffic will be handled by the QoS interface config for ethernet1/3 and there the only limit is 1 Gbit (except if there is a lot of skype traffic than the update download can only consume up to 800 Mbit)
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!