: Add QoS Policy Rules
Focus
Focus
Table of Contents

Add QoS Policy Rules

Learn how to add the QoS policy rules in
Prisma SD-WAN
.
QoS or Priority Policy Rules are contained within a QoS set. QoS policy rules determine application priority within a network. They include attributes such as network context, QoS prefixes, application, priority, and DSCP for an application.
  • Network context—Network context segments network traffic for the purpose of applying different QoS policy rules for the same application. This gets the highest order of precedence.
  • Source prefix filter—Source based attributes get precedence over destination based attributes. Source prefix filters are often added as exceptions, so these get a higher precedence over applications.
  • Applications—These are destination based, hence lower in the order of precedence.
  • Destination prefix filter—These are often added in context of an application, so destination prefix filters get lower precedence than applications.
  • Priority—Priority determines the relative priority of network resources assigned to each application.
  • DSCP Values - When policy rules with marked DSCP bits are applied to a site, the ION branch device will honor the bits in the first packet on an unknown application flow, and queue the flow in the specified priority class.
QoS policy rules are added to the QoS policy sets.
  1. Select
    Manage
    Policies
    QoS
    QoS Stacks
    Advanced
    QoS Sets
    .
  2. Select a QoS set and
    Add Rule
    .
  3. On the
    Info
    tab, enter a
    Name
    for the policy rule.
  4. Enter an
    Order
    number.
    The default order number for a policy rule is 1024. .
  5. (Optional)
    Enter
    Description
    and
    Tags
    for the policy rule.
  6. Click
    Next
    .
  7. Select a Network Context on the
    Network Context
    tab and click
    Next
    .
    You can add a new network context by clicking
    Add
    .
  8. Select a
    Source Prefix
    and a
    Destination Prefix
    on the
    Prefixes
    tab.
    For information on prefixes, see Configuring Prefixes.
  9. Click
    Next
    .
  10. Select applications to apply the policy rule on the
    Apps
    tab and click
    Next
    .
    The number of applications for a policy rule is limited to 256.
    You can filter applications based on:
    • For sites 6.0.1 or above—Select this option to view system applications from PANW, applications common to PANW and
      Prisma SD-WAN
      , and custom applications defined in
      Prisma SD-WAN
      .
    • For sites below 6.0.1—Select this option to view legacy system applications in
      Prisma SD-WAN
      , applications common to PANW and Prisma SD-WAN, and custom applications defined in
      Prisma SD-WAN
      .
    • For any site—Use this option to view applications common to PANW and
      Prisma SD-WAN
      along with custom applications defined in
      Prisma SD-WAN
      .
    (Optional)
    You can check the type of application -
    System (PANW, CGX)
    ,
    System (CGX)
    , or
    Custom
    by selecting the application first and then using the filters to view the type of application.
  11. Choose a priority on the
    Priority
    tab and click
    Next
    .
    For more information on priorities, see Configure Circuit Capacities.
  12. Select an action from the
    DSCP
    drop-down on the
    DSCP
    tab.
    If you choose:
    • No Action—DSCP marking in the packet is not modified.
    • Mark/Remark—Select a value between 0-63 from the drop-down. If a DSCP value is specified and a flow matches this rule in the LAN to WAN direction, all packets belonging to this flow is changed to the DSCP value specified here. For more information on DSCP configuration, see Configure DSCP.
  13. Click
    Next
    .
  14. Review the
    Summary
    of the policy rule.
  15. Save & Exit
    .
    You can sort QoS policy rules based on rules that are enabled, order of the rules, name, network context, source and destination prefixes, priority of the application, and the DSCP value. For policy rules in Path or QoS Stacks to be active, you need to bind Path or QoS Stacks to a site. A single Path or QoS Stack can be bound to a site at a time.
    You can bulk update or edit information for multiple QoS policy rules by selecting multiple policy rules and editing the required information.
    Information changed using bulk edit of policy rules overwrites the existing information of individual policy rules.

Recommended For You