Trusting QOS markings

[kkeeton]

will the PAN-OS automatically trust markings applied by other systems on the network or do I need to make a policy in addition to the policy on the rest of the network?

[hshah]

Hi Kkeeton,

As per my knowledge, If PANW receives Packet with QOS marking  then by default it allows marking and do not strip them.

Regards,

Hardik Shah

[kkeeton]

thanks for response.. and to honor the markings from other devices?

[hshah]

Hi Kkeeton,

Yes, it process marking from other devices. Lets say if packet comes with QOS marking 2, than it applies respective QOS.

Let me know if that answers query.

Regards,

Hardik Shah

[kkeeton]

will it honor it so if a packet with QOS low marking and one comes in with QOS applied with higher marking, will it process the higher marking first?

[hshah]

Hi Kkeeton,

By default QOS is turn off, so it gives same priority to all packets regardless of marking.

If QOS is enabled than it can consider marking.

Regards,

Hardik Shah

[kkeeton]

and to "turn it on" so that it trusts and applies/honors the other systems do I need to make a policy or just apply max-bandwidth to the interface. as there is no "turn on check box" do I just make a default blank policy and apply the profile to the interface otherwise unconfigured?

[hshah]

Hi Kkeeton,

To process anything in QOS, its required to configure entire QOS policy. Refer following document.

https://live.paloaltonetworks.com/docs/DOC-3439

Its not just one command ot turn on QOS, but its full configuration just like other platforms.

Regards,

Hardik Shah

[kkeeton · Accepted solution]

so the answer is - by default it will not modify QOS markings but it will not honor them.. to honor them I will need to create a fully policy map in replication of my production network?

[hshah]

That is correct Kkeeton ...

[pulukas]

You will find the details on QOS configuration and behavior here.

QoS in PAN-OS 4.1