How does the Firewall Handle Diffserv Headers in an IPSec Tunnel?

When packets destined for an IPSec tunnel include QoS information, the firewall will perform the following:

• The entire original packet, diffserv bits included, will be encrypted.
• The firewall will respect the QoS priority specified in the original packet
• The new encrypted IPSec packet will not include the QoS information in the new headers.

owner: dwhyte