QoS Interface Settings
Enable QoS on an interface to set bandwidth limits for the interface and/or to enable the interface to enforce QoS for egress traffic. Enabling a QoS interface includes attaching a QoS profile to the interface. QoS is supported on physical interfaces and, depending on firewall model, QoS is also supported on subinterfaces and Aggregate Ethernet (AE) interfaces. See the Palo Alto Networks product comparison tool to view QoS feature support for your firewall model.
To get started, Add or modify a QoS Interface, and then configure settings as described in the following table.
QoS Interface Settings
QoS InterfacePhysical Interface
Select the firewall interface on which to enable QoS.
Egress Max (Mbps)
Enter the maximum throughput (in Mbps) for traffic leaving the firewall through this interface. The value is 0 by default, which specifies the firewall limit (60,000 Mbps in PAN-OS 7.1.16 and later releases; 16,000 in PAN-OS 7.1.15 and earlier releases).
Though this is not a required field, we recommend always defining the Egress Max for a QoS interface.
Turn on QoS feature on this interface
Select to enable QoS on the selected interface.
QoS InterfacePhysical InterfaceDefault Profile
Select the default QoS profiles for clear text and for tunneled traffic. You must specify a default profile for each. For clear text traffic, the default profile applies to all clear text traffic as an aggregate. For tunneled traffic, the default profile is applied individually to each tunnel that does not have a specific profile assignment in the detailed configuration section. For instructions on defining QoS profiles, refer to Network > Network Profiles > QoS.
Egress Guaranteed (Mbps)
QoS InterfaceClear Text Traffic/ Tunneled Traffic
Enter the bandwidth that is guaranteed for clear text or tunneled traffic from this interface.
Egress Max (Mbps)
Enter the maximum throughput (in Mbps) for clear text or tunneled traffic leaving the firewall through this interface. The value is 0 by default, which specifies the firewall limit (60,000 Mbps in PAN-OS 7.1.16 and later releases; 16,000 in PAN-OS 7.1.15 and earlier releases). The Egress Max for clear text or tunneled traffic must be less than or equal to the Egress Max for the physical interface.
For example, assume a configuration with two sites, one of which has a 45 Mbps connection and the other a T1 connection to the firewall. You can apply restrictive QoS settings to the T1 site so that the connection is not overloaded while also allowing more flexible settings for the site with the 45 Mbps connection.
To remove a clear text or tunneled traffic entry, clear the entry and click Delete.
If the clear text or tunneled traffic sections are left blank, the values specified in the Physical Interface tab’s Default Profile section are used.
QoS for Clear Text and Tunneled Traffic
QoS for Clear Text and Tunneled Traffic At the minimum, enabling a QoS interfaces requires you to select a default QoS profile rule that defines ...
Configure QoS Follow these steps to configure Quality of Service (QoS), which includes creating a QoS profile, creating a QoS policy, and enabling QoS on ...
Network > Network Profiles > QoS
Network > Network Profiles > QoS Add a QoS profile to define the bandwidth limits and priority for up to eight classes of service. You ...
Configure QoS for a Virtual System
Configure QoS for a Virtual System QoS can be configured for a single or several virtual systems configured on a Palo Alto Networks firewall. Because ...
QoS Bandwidth Management
QoS Bandwidth Management QoS bandwidth management allows you to control traffic flows on a network so that traffic does not exceed network capacity (resulting in ...
QoS Concepts Use the following topics to learn about the different components and mechanisms of a QoS configuration on a Palo Alto Networks firewall: QoS ...
Use Case: QoS for a Single User
Use Case: QoS for a Single User A CEO finds that during periods of high network usage, she is unable to access enterprise applications to ...
QoS Profile Use a QoS profile rule to define values of up to eight QoS Classes contained within that single profile rule. With a QoS ...
QoS Overview Use QoS to prioritize and adjust quality aspects of network traffic. You can assign the order in which packets are handled and allot ...