Prioritizing Teams application traffic for Global Protect and Local users

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

Prioritizing Teams application traffic for Global Protect and Local users

L3 Networker

Hi Team,

 

We are facing slowness issue with the Teams Application traffic Voice and Video and there is some disruption on the voice and video.

 

Is it possible to configure Qos for Teams application traffic and whether it will work correctly?

 

If any one had already implemented Qos for Team in your environment could you please let us know on how to do the configuration to achieve this.

 

Epically the Qos Rule and applications needed to be included in the application tab.

 

 

 

 

4 REPLIES 4

L6 Presenter

Hi @nikoolayy1  thanks for the reply. The issue is we need all the traffic to go through the full tunnel.So split tunnel is not an option for us.

 

So we need to know whether application based Qos Policy will work better on the firewall as we had previously seen PBF rule based on Application traffic will not work well due to technical constraints.

 

Thanks in advance.

L6 Presenter

If you are not decrypting the traffic it could be that you can't match corectlly the application etc. You may try using QOS based on the globalprotect zones or destination ports (services as palo alto calls them) , destination FQDN, URL or ip addresses:

 

 

https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/get-started/create-interface...

 

 

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/quality-of-service/configure-qos.html

 

 

Maybe helpfull: 

 

https://www.youtube.com/watch?v=7fU91SZ5xDk

Fully aree with Nikolai - I've lived it through - attempts to pritoritize MS Teams by application failed in my case (I've discovered many traffic missing the policy, also we are using UDP for calls, not TCP that can be recognized as ms-teams app - so in my case I've finished with working QoS policy based on MS Teams official endpoint list (https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-world...)

  • 4676 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!