Applies To: Cloud-managed Fireboxes
As a WatchGuard Service Provider, you can create Firebox templates that are shared with all the accounts you manage, including any accounts that you have delegated access to. This enables you to create standard templates that you manage in your Service Provider account. Devices in multiple managed accounts can subscribe to the same template.
When you create Firebox templates in a WatchGuard Cloud Service Provider account, your managed and delegated accounts inherit the templates from the Service Provider account. When tier-1 Service Providers create a template, the template is available to managed and delegated accounts and devices in all accounts below them. Devices allocated to accounts below more than one Service Provider can subscribe to templates from any tier above them.
Inherited templates are visible in the Firebox Template list in all managed accounts, but are not editable. In each managed account, an operator can subscribe Fireboxes to inherited templates, in the same way as any other template.
For examples of how to use templates in a Service Provider account, go to Firebox Template Examples for Service Providers.
Manage Service Provider Firebox Templates
From a Service Provider account, you can add, edit, delete, and deploy Firebox templates that are inherited by all managed accounts and accounts you have delegated access to.
To manage Firebox templates for a Service Provider account:
- In Account Manager, select the Service Provider account. To select your own Service Provider account, select
Overview. Or, select a tier-2 Service Provider account.
To create templates inherited by all managed and delegated accounts, make sure to select a Service Provider account ( ), not a Subscriber account ( 
).
- Select Configure > Firebox Templates.
The Firebox Template page opens.
- Add, edit, or remove the templates for the Service Provider account. For more information, go to Manage Firebox Templates.
After you add templates to a Service Provider account, the templates appear in the Firebox Template page for all managed accounts.
If you delete a template from a Service Provider account, the template is removed from the Firebox Template page for all managed accounts. You cannot delete a Firebox template from a Service Provider account if the template has subscribed devices in any of your managed accounts.
You cannot revoke delegation access from an account if devices in the account are subscribed to a template inherited from the delegated Service Provider account.
Inherited Templates in Managed Accounts
In the Firebox Template list in a managed account, the INHERITED label appears next to the name of each template that is inherited from the Service Provider. When the operator points to the INHERITED label, they can see whether the template was inherited from a Service Provider account that manages them or from a Service Provider account with delegated access to their account.
From the managed or delegated account, an operator can subscribe a device to an inherited template, so that the device uses the settings in the template. For more information, go to Subscribe a Firebox to a Template.
From the managed or delegated account, an operator can make a copy of the template so that they can edit the settings in a new template. For more information, go to Manage Firebox Templates.