Firewall Management Group Policy Precedence

Question

Good Morning all, 
 When I deployed my XG firewalls, I did not use FW Management Groups. So now I have multiple FW's will their own policies and settings. I want to move to management groups, but I am unsure on how this would affect my existing policies. 
 Example: I have multiple firewall polices on each individual firewall. I create a management group with a new policy and move a firewall in to this group, how does this new policy interact with the existing polices? Does it go to the top? Bottom? Override etc? 
 Unfortunately I don't have a spare FW to test with. 
 Thanks in advance 
 Stu

FormerMember · Accepted Answer

Hi Stuart Hamilton1 , 
 Thank you for reaching out to the Community! 
 " When you add firewall or NAT rules, the Top and Bottom settings apply only to the ordering of rules within Sophos Central , not rules that may have been created locally on the firewall. Furthermore, all rules pushed from Sophos Central are inserted at the top of the rules list on the firewall." 
 Check out the following document for more information: 
 
 https://docs.sophos.com/central/Customer/help/en-us/central/Customer/concepts/Firewalls.html 
 
 Thanks,

FormerMember · Answer

Hi Stuart Hamilton1 , 
 Thank you for the follow-up question. 
 No, removing the firewall from the group won't remove the rule sets. The configured firewall rules from the Central will remain on the firewall. 
 Thanks,

Firewall Management Group Policy Precedence

Top Replies