Reverse Base Policies in Global Templates

Hi Thomas_LSW,

I assume you want to unassign the template so that you can modify the policy in the sub-estate. This can only be achieved removing the template assignment, see: https://docs.sophos.com/central/Enterprise/help/en-us/SettingsAndPolicies/GlobalTemplates/Sub-estates_templates/index.html

Best regards,
Marcel

Hi Marcel,

no, I don't want to unassign the whole template, only the "Peripheral Base Policy" !

Best regards,

Thomas

Hi Thomas,

Unfortunately this is not possible, when working with templates you always push all policies.

Best regards,
Marcel 

Hi Marcel,

no, that is not correct.

I only push 3 base policies to the sub-estates:

All other base policies are unassigned !

How can I unassign the "Peripheral Control" Policy ?

Best regards,

Thomas

Hi Thomas,

unfortunately this is a common misconception. The screenshot only shows that you modified 3 policies. 

As soon as you assign a template to a sub-estate then all base policies of that sub-estate (independent whether you changed the policy in the temple) will be overwritten with the information in the template. If you next go into the sub-estate to which you assigned the policy you will see that all the base policies within that sub-estate are locked (these will be a small lock symbol in front of the base policy). 

Global Settings defined in a template are handled slightly different, these are namely merged with the global settings in the sub-estate before locking these global settings.

This behavior is for example documented in the following KBA: https://support.sophos.com/support/s/article/KB-000038641.

Best regards,
Marcel  

Hi Thomas,

unfortunately this is a common misconception. The screenshot only shows that you modified 3 policies. 

As soon as you assign a template to a sub-estate then all base policies of that sub-estate (independent whether you changed the policy in the temple) will be overwritten with the information in the template. If you next go into the sub-estate to which you assigned the policy you will see that all the base policies within that sub-estate are locked (these will be a small lock symbol in front of the base policy). 

Global Settings defined in a template are handled slightly different, these are namely merged with the global settings in the sub-estate before locking these global settings.

This behavior is for example documented in the following KBA: https://support.sophos.com/support/s/article/KB-000038641.

Best regards,
Marcel