nested device group

[MP18]

i am trying to understand below from admin guide

Without a hierarchy, you would have to configure both function- and location-specific settings for every device group in a single level under Shared.

if anyone can explain me in more detail that will be much appreciated 

[Remo · Accepted solution]

Hi @MP18

If you have this hierarchy for example:

 - Shared

      - Internetfirewalls

           - HQ

           - RemoteOffice1

           - RemoteOffice2

      - Datacenterfirewalls

           - HQ

           - DisasterRecoverySite

In this example you maybe want to configure general block rules for bad stuff or general allow rules for webaccess of your users. With this hierarchy you are able to configure these exmple rules just once in the DG "Internetfirewalls" so these rules are applied to all child device groups. Also when you change something on these rules, you need to to this only once.

Without a DG hierarchy you would have to configure on every firewall where you need them.

Maybe your asking now, why not create the rules in Shared DG? Simply because it will not make much sense to have webaccess/url filtering rule applied to a datacenterfirewall where you don't have URL filtering license. Obviously this applies to my example from above. Depending on the use case it might be a good choice to create rules there. 

[MP18]

Many Thanks.