1. A method comprising: at a management entity: generating selectable security policy classifications each identifying security policies that share common security rules, each of the security policies applied by a corresponding one of different security devices to control access to a resource; creating a new policy template that includes all of the security policies identified by selected ones of the policy classification selections; creating a new security policy based on the new policy template; and applying the new security policy to a security device over a network.