Palo Alto Networks Certified Network Security Engineer (PCNSE)Deploy and ConfigureHard
A network security team needs to implement QoS on a Palo Alto Networks firewall to prioritize voice (SIP/RTP) and video conferencing traffic over general web browsing and bulk data transfers. The goal is to ensure real-time communication applications receive preferential treatment during network congestion. Which QoS configuration element is primarily responsible for classifying and marking traffic to be prioritized?
- ATraffic Shaping Policy
- BEgress Interface Buffer
- CQoS Profile
- DQoS Policy Rule
Show answer & explanationAnswer & explanation
Correct answer: D. QoS Policy Rule
The QoS Policy Rule is where traffic classification and marking (e.g., setting DSCP values) occur. It identifies specific applications (like SIP/RTP) and applies the desired QoS actions, including marking the packets, which then influences how the traffic is treated by the QoS Profile applied to the egress interface.
Why the other options are wrong
- A. Traffic Shaping Policy controls bandwidth limits for specific traffic types, which is part of QoS but not the primary element for classification and marking.
- B. Egress Interface Buffers are physical queues on the interface where packets wait for transmission, managed by the QoS Profile, but they don't classify or mark traffic.
- C. A QoS Profile defines how different classes of traffic are treated (queuing, bandwidth), but it doesn't classify or mark the traffic itself.
Palo Alto Networks QoS Policy Rule
A QoS Policy Rule on a Palo Alto Networks firewall classifies traffic based on application, user, and other criteria, and applies QoS actions such as marking DSCP values or assigning to a QoS class.
- Similar to security policies in structure and evaluation order.
- Determines which traffic gets prioritized.
- Works in conjunction with QoS Profiles applied to interfaces.
Memory trick: QoS Rules Mark, Profiles Shape, Interfaces Deliver.