About QoS, Path Selection, and Hybrid Networking : Filtering the LAN traffic from the WAN traffic
  
Filtering the LAN traffic from the WAN traffic
1. If QoS isn’t running, choose Networking > Network Services: Quality of Service and enable inbound or outbound QoS Shaping.
2. Choose Networking > Network Services: Subnet Side Rules.
3. Click Add a Subnet Side Rule.
4. Select Start, End, or a rule number from the drop-down list.
5. Specify the client-side appliance subnet using the format <ip-address>/<subnet-mask>.
6. Select Subnet address is on the LAN side of the appliance.
7. Click Add.
To verify the traffic classification, choose Reports > Networking: Inbound QoS or Outbound QoS.
The appliance processes the subnet side LAN rules before the QoS outbound rules.
In virtual-in-path deployment, using subnet side rules is the same for QoS and NetFlow. In an in-path deployment and NetFlow discard the subnet side rules.