Thanks for the reply, yes big part of it about the MX for example we need to apply layer 7 acls on all of the networks in the ORG , that's why i thought of the template but as you said if it's gonna change the config on existing networks and have 20 site down then it's not worth it .   Can you please recommend a solution for applying group policy/acls on all networks in the org beside the template option ?   Thanks ... View more