Palo Alto Networks Knowledgebase: How does the Firewall Handle Diffserv Headers in an IPSec Tunnel?

How does the Firewall Handle Diffserv Headers in an IPSec Tunnel?

3026
Created On 02/07/19 23:38 PM - Last Updated 02/07/19 23:39 PM
VPNs
Resolution

When packets destined for an IPSec tunnel include QoS information, the firewall will perform the following:

  • The entire original packet, diffserv bits included, will be encrypted.
  • The firewall will respect the QoS priority specified in the original packet
  • The new encrypted IPSec packet will not include the QoS information in the new headers.

owner: dwhyte



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000Cm0tCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language