FirePower 1120 QoS Rule

[Zviad Gogilava]

Hi,

MS AD REALMS is configured on FirePower. AD synchronization is successful. I created a policy in QoS where members of a particular group should not be restricted and all other non-members of this group should be restricted to 10 Mbit / s for both upload and download.

User ABCD1 is a member of a group (_GRP_1800_0900) that should not be rate-limited, although it is still subject to rate-limiting. If I specify ABCD1 instead of the _GRP_1800_0900 group, then the rule works fine.

how to solve a given problem?

P.S.

FirePower 7.0.1.1-11version

[Jitendra Kumar]

you have one rule name "workout" that is top on the QoS ruls. you have seledted in source MoESD_All_Users
and also specified user group as well. Remove "MoESD_All_Users" from top of the rule that called "work out" also you can test with remove network and put it any for this rule make sure you have added expected user group that required for QoS bypass

Thanks,

Jitendra

[Zviad Gogilava]

This solution did not help me

Thanks,

Zviad

[Jitendra Kumar]

Please go through the below link hope it will help.

https://www.youtube.com/watch?v=pshOBjmTRpg

https://www.youtube.com/watch?v=pshOBjmTRpg

https://www.cisco.com/c/en/us/td/docs/security/firepower/640/configuration/guide/fpmc-config-guide-v64/quality_of_service__qos__for_firepower_threat_defense.html

Thanks,

Jitendra