Prioritizing Teams application traffic for Global Protect and Local users

cancel
Showing results for 
Search instead for 
Did you mean: 

Prioritizing Teams application traffic for Global Protect and Local users

L2 Linker

Hi Team,

 

We are facing slowness issue with the Teams Application traffic Voice and Video and there is some disruption on the voice and video.

 

Is it possible to configure Qos for Teams application traffic and whether it will work correctly?

 

If any one had already implemented Qos for Team in your environment could you please let us know on how to do the configuration to achieve this.

 

Epically the Qos Rule and applications needed to be included in the application tab.

 

 

 

 

4 REPLIES 4

Cyber Elite
Cyber Elite

Hi @Nikolay_Dimitrov  thanks for the reply. The issue is we need all the traffic to go through the full tunnel.So split tunnel is not an option for us.

 

So we need to know whether application based Qos Policy will work better on the firewall as we had previously seen PBF rule based on Application traffic will not work well due to technical constraints.

 

Thanks in advance.

Cyber Elite
Cyber Elite

If you are not decrypting the traffic it could be that you can't match corectlly the application etc. You may try using QOS based on the globalprotect zones or destination ports (services as palo alto calls them) , destination FQDN, URL or ip addresses:

 

 

https://docs.paloaltonetworks.com/globalprotect/9-0/globalprotect-admin/get-started/create-interface...

 

 

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/quality-of-service/configure-qos.html

 

 

Maybe helpfull: 

 

https://www.youtube.com/watch?v=7fU91SZ5xDk

Fully aree with Nikolai - I've lived it through - attempts to pritoritize MS Teams by application failed in my case (I've discovered many traffic missing the policy, also we are using UDP for calls, not TCP that can be recognized as ms-teams app - so in my case I've finished with working QoS policy based on MS Teams official endpoint list (https://docs.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-world...)

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!