Next-Generation Firewall
Network > Network Profiles > QoS
Table of Contents
Network > Network Profiles > QoS
Add a QoS profile to define the
bandwidth limits and priority for up to eight classes of service.
You can set both guaranteed and maximum bandwidth limits for individual
classes and for the collective classes. Priorities determine how
traffic is treated in the presence of contention.
To fully enable the firewall to provide QoS, also:
- Define the traffic that you want to receive QoS treatment (select Policies > QoS to add or modify a QoS policy).
- Enable QoS on an interface (select Network > QoS).
See Quality of Service
![]()
for complete QoS
workflows, concepts, and use cases.
QoS
Profile Settings | |
|---|---|
Profile Name | Enter a name to identify the profile (up
to 31 characters). The name is case-sensitive and must be
unique. Use only letters, numbers, spaces, hyphens, and underscores. |
Egress Max | Enter the maximum throughput (in Mbps) for
traffic leaving the firewall through this interface. The value is
0 by default, which specifies the firewall limit (60,000 Mbps in
PAN-OS 7.1.16 and later releases; 16,000 in PAN-OS 7.1.15 and earlier
releases). The Egress Max for a QoS
profile must be less than or equal to the Egress Max for the
physical interface enabled with QoS. See Network
> QoS. Though this is not a required field, it
is recommended to always define the Egress Max for a
QoS profile. |
Egress Guaranteed | Enter the bandwidth that is guaranteed for
this profile (Mbps). When the egress guaranteed bandwidth is exceeded,
the firewall passes traffic on a best-effort basis. You can
configure the Egress Guaranteed and Egress
Max values in Mbps or percentages. The following considerations
should be taken into account when configuring these values in percentages:
For
example: The Egress Max is configured as
100Mbps. The guaranteed percentage configured for Class 1 is 30%,
for Class 2 it is 20%, for Class 3 it is 5%, and for Class 4 it
is 1%. This configuration results in a total percentage guaranteed as
56%. In this case, profile Egress Guaranteed is
56Mbps (56% x Egress Max). This also means
that Class 1 Egress Guaranteed is 30Mbps,
Class 2 Egress Guaranteed is 20Mbps, and
so on. |
Classes | Add and specify how
to treat individual QoS classes. You can select one or more classes
to configure:
Though
this is not a required field, we recommend you always define the Egress Max value
for a QoS profile.
|