All groups are based on a nested hierarchy. You can add policies to groups. Global group policies are overridden by policies lower in the hierarchy.

You should carefully design your appliance hierarchy so that you can identify what policies are needed on the appliances in each group. Carefully designing the group hierarchy will ensure that you implement the best solution for your network.