topic Quos Global Configuration Settings Explanation in Firewall and Security Management

Quos Global Configuration Settings Explanation

civoulkidis — Thu, 25 Nov 2021 10:58:14 GMT

Hi,

I would like to have a clear explanation about QOS Global Configuration Settings.

I have a security policy with 100 rules and they all get the default weight (10).

Let's say that the available bandwidth is 10GBps.

What is the available bandwidth for every separate rule?
What happens when a rule does not have active connections?
How can I monitor the bandwidth of each rule?
QOS weight is applicable even if the QOS blade is not activated?

Below you can see the QOS settings,

Re: Quos Global Configuration Settings Explanation

rrbranco — Thu, 25 Nov 2021 11:46:39 GMT

What is Check Point QoS?

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk30590&partition=Basic&product=QoS

Introduction to QoS

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_QoS_AdminGuide/Topics-QoSG/Introduction-to-QoS.htm

Weight

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_QoS_AdminGuide/Topics-QoSG/Basic-Policy-Management.htm#Weight

Limits

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_QoS_AdminGuide/Topics-QoSG/Basic-Policy-Management.htm#Limits

Guarantees

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_QoS_AdminGuide/Topics-QoSG/Basic-Policy-Management.htm#Guarante

Re: Quos Global Configuration Settings Explanation

genisis__ — Thu, 25 Nov 2021 12:43:27 GMT

One point you have made which I think is important, the ability to actually monitor a rule that has a QoS policy ie. bandwidth rule.

I've never been able to see this, but it would be nice to have a field where its showing you bandwidth stats for each rule.

Logically, from a reporting prospective I would like to see a report that could be run against the rule with QoS to map out the history of usage, better still monitor via SNMP (that may be too much).