QoS Sophos XG

Question

Hello, everyone, 
 I have a problem with QoS settings. I have a RED tunnel between a branch office and the head office. I would like to set up QoS between the 2 points for port TCP 9966. I set a limit and then included it in firewall rules. But it does not work. I've tested everything. I look forward to any help. 
 greeting Farzan

Farzan Barouj · Accepted Answer

I found the solution and I'm sharing it with you. 
 everything I did in configuration was correct. but QoS cannot affect the active sessions. That is, before I created a firewall rule with QoS, another firewall rule was active there, with which the traffic was matched. After that I created a new firewall rule with limited QoS. Although the sessions were matched with the new firewall rule, but still QoS didn't work. Therefore, after creating the new firewall rule with QoS, I terminated all active sessions between the source and destination address(es). The commands I used: first login via SSH. # conntrack -L | grep "orig-dst=10.1.10.2" (example IP of target server) - confirm active sessions. "L" stands for List # conntrack -D -d 10.1.10.2 - explicitly deletes all sessions towards target address. "D" stands for "Delete conntrack or expectation" and "d" for destination address. 
 After that, QoS was working properly. I recommend that when you do QoS setting, please pay attention to the active sessions between source and destination and kill them after creating firewall rules.

QoS Sophos XG

Top Replies

Submitted a Tech Support Case lately from the Support Portal?