1. A method comprising: at a management entity: connecting with multiple security devices across a network, each security device configured to operate in accordance with one or more security policies; importing, over the network, data describing the security policies from the multiple security devices; and classifying the imported security policies into security policy classifications based on commonality in information included in the security policies across the multiple security devices.