topic Re: Unable to exclude host from QoS Policy in Network Security

Unable to exclude host from QoS Policy

ABaker94985 — Wed, 02 Nov 2022 16:01:26 GMT

We have a 4110 Firepower running 7.0.2 managed by FMCv also running 7.0.2. We've had a couple recent events where Adobe released updates and our Internet bandwidth was impacted. An update server has been created, so I'm trying to exclude this server from the QoS policy as shown in the attached image. Unfortunately, the deployment fails with the following error:

Deployment failed. Correct configuration error(s) and redeploy. If deployment fails again, contact Cisco TAC

Nov 2 10:21:15 Expected space at line number 89: .
Failed to parse qos rules file -1

Any ideas what we need to try? Thank you.

Re: Unable to exclude host from QoS Policy

Marius Gunnerud — Mon, 07 Nov 2022 22:12:03 GMT

Try changing the source and destination interface objects to inside-group and outside-group.

Re: Unable to exclude host from QoS Policy

ABaker94985 — Tue, 08 Nov 2022 14:26:29 GMT

Thank you so much. I completely missed that the previous configuration was set that way, but deployment worked as normal.

Re: Unable to exclude host from QoS Policy

Marius Gunnerud — Wed, 09 Nov 2022 09:21:20 GMT

Glad I could help out, and thanks for rating the solution.