How does the Firewall Handle Diffserv Headers in an IPSec Tunnel?
Created On 02/07/19 23:38 PM - Last Updated 02/07/19 23:39 PM
When packets destined for an IPSec tunnel include QoS information, the firewall will perform the following:
- The entire original packet, diffserv bits included, will be encrypted.
- The firewall will respect the QoS priority specified in the original packet
- The new encrypted IPSec packet will not include the QoS information in the new headers.