[derspot]

I havent found such a setting , but it might be possible through a custom app on the OPSEC API. I think you should look for marking at the packet origin.

I think we need someone who understands this to comment.

For example WHY WHY WHY do we need to configure DiffServ at both the Interface/QOS level AND at the QOS Rule Base Itself.

Configuring DiffServ at the Interface level is obvious - you want Diffserv to apply here. However what is the reason for creating QOS rules under the DiffServ Classes at the QOS Rule base ?