Hang on there guys, I will get back to you, just got in from travel. Holiday week end but I will respond. Enjoy! Most likely you have to be more specific in the policy in order for it to be applied to only one type of traffic. Check if you have any defaults enabled on any of the tabs, you might have to make unique thresholds and traffic types for it to hit only one.

QoS on subinterfaces only supported on certain chassis Additional Information Platforms supporting QoS on a sub-interface: PA-3200 series PA-5200 series PA-7000 series knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008UPaCAM&lang=en_US%E2%80%A9

Hang on there guys, I will get back to you, just got in from travel. Holiday week end but I will respond. Enjoy!

Use this docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/quality-of-service/qos-use-cases/use-case-qos-for-a-single-user#id5177df58-717c-4485-bf60-00381413d8c1 It can be done by user-id or by IP address without user-id. To do it by IP you must reserve the IP by mac address in Network tab > DHCP > Add and then choose the interface you want to set that up. All the details are in that menu afterwards. USER-ID is a bit more complex, best to have active directory environment or could integration identity management O365 etc to make that tie in.

Try this docs.paloaltonetworks.com/pan-os/10-2/pan-os-admin/quality-of-service/enforce-qos-based-on-dscp-classification#id2f3f51bd-8bf2-4586-81a6-383b39a0413f