Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
your understanding is correct. "encapsulation ipsec preference" is overwritten by the Centralized control-policy, where you "match tloc" and setting the "preference".
