Phil,
Sorry about the delay. Pls. replace the public pc ip and staff pc ip with proper translated IP address. I hope you are translating staff PC to a certain IP address when it goes out to the internet and the public PCs to another IP address when they go out to the internet. Pls. send me "sh run" from the firewall so, I can take a look at it.
You should configure something like this. You can copy and paste these lines onto the ASA once you verify the interface names and replace the IP addresses.
conf t
access-list public-pc permit ip host x.x.x.x any eq 80 ----------> where x.x.x.x is the IP address of the public PCs when they go out to the internet
access-list staff-pc permit ip host y.y.y.y any eq 80 ---------------> where y.y.y.y is the IP address of the staff PCs when they go out to the internet.
class-map police-traffic
match access-list public-pc
class-map pirority-traffic
match access-list staff-pc
!
priority-queue outside
policy-map police-priority-policy
class police-traffic
police output 500000 ---------------> You are providing 500Kbps for the public PCs out of the available BW to you. You may choose another value.
class priority-traffic
priority
service-policy police-priority-policy interface outside
-Kureli
