
Explanation:
Name # HTTP-HTTPS-QoS
Apply QoS On # Interfaces in Destination Interface Objects
Download/Upload Limit # 5 Mb/s
Source Interface Networks # 192.168.1.0/24
Destination Interface Networks # 192.168.2.0/24
Destination Ports # HTTP-HTTPS
The HR workstation resides on the inside 192.168.1.0/24 network, making that subnet the source-interface network. Internet-bound traffic exits through the 192.168.2.0/24 network, which must be configured as the destination-interface network. Because rate limiting must occur as traffic leaves toward the internet, QoS is applied to interfaces in the destination interface objects. The HTTP-HTTPS object identifies the destination ports for web traffic, while HTTP-HTTPS-QoS provides a descriptive rule name. Both download and upload limits are configured as 5 Mb/s. Cisco Secure Firewall applies a QoS limit independently on each selected interface and determines upload and download direction based on the connection initiator. The Apply QoS On selection must correspond to a populated source or destination interface condition. Cisco Secure Firewall QoS configuration