- devices with no preset defined have a 'allow all' default policy
- users customizations to the preset are stored on redis (both 'allow' and 'drop' policies) as exceptions to the default preset
- default presets updates are allowed, however users customizations have priority (per protocol)