We have a PIX that we use for internal client Internet browsing and also for a couple of IPSec tunnels from remote IOS routers. I would like to somehow give more priority to the IPSec in order to reserve more of the bandwidth for VPN traffic. Is this possible?
Yes, that is possible but not on the Pix itself. You will need to have a router in front-of or behind the pix to do QoS. Your options are very flexible if you have a Cisco router and are using CBWFQ/Modular QoS.
-S
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.