20.0 Managing Policy Groups

If you have multiple policies that you always want assigned together, you can create a policy group and add the policies as group members. Then, rather than assigning the individual policies, you can assign the policy group.

A policy can be a member of more than one policy group. For example, assume that you have 10 policy groups to accommodate the unique firewall and wireless access needs of various groups within your organization. However, all organizations require the same security for data encryption, so you add the same Data Encryption policy to all of the policy groups.

The following sections provide instructions for managing policy groups:

You assign and remove policy groups for users and devices the same way that you assign and remove policies. For information, see Section 11.0, Assigning Security Policies and Section 22.0, Removing Policy Assignments From Users and Devices.