I have the same problem. Have you found the solution?
No, the issues back then were the precedence within the rules. As far as I was concerned you could only use it for very basic firewalling. So we bought a proper firewall and rebuild the solution entirely.
No idea if this is still an issue, it has been quite some time since I last checked the possibilities.
Contact Us:Sam PirokCommunity@extremenetworks.com