The firewall uses rules to assign packets to the queues configured in the QoS. This assignment is independent of the DSCP value in the IP header. The assignment is handled by actions that are assigned to a rule. If a rule matches an action and a session is opened in the firewall, the system checks whether the target or source interface of the session has been assigned to a queue and notes the assignment in the action. When data is flowing during the session and the action is executed, the respective packet is tagged with the assignment, is ignored by the DSCP classifier, and is counted as "Pre-Classified" in the QoS statistics for the respective queue.
The queue assignment refers to queues that have been assigned to physical interfaces, but is inherited by interfaces stacked above them. For example, if the target interface of a session is a VPN interface, the queue assignment is passed on to the physical interface (WAN) and applied there.
Since the IPv4 and IPv6 firewalls differ in their configuration, they are listed separately below.
