Difference between Rulebase Security Rules and security policy in CLI

[Ian_Rabensteine]

Hello!

I am struggling with some CLI config as we don't have access to the gui at the moment.  I am trying to create an allow rule for ping, and searching around has directed me to use the syntax "set rulebase security rule". 

I did that and the rule committed successfully.  When I 'show run security policy' I see the rule I just created at the very end.  I want to move it up in the list as its underneath a deny all rule.  However, when I try to use the "move" command, no matter what target rule I choose it says it doesn't exist.  If I tell it to move the rule to the top, it says it's already at the top.  If I do a 'show rulebase security rules' the rule I just created is the only rule listed.  So it seems like the rulebase security rules and the security policy are different, but then why does the rule I just created show up in both places?  Is there a different way of adding a security policy?

In case its helpful information, the rules that exist on the firewall exist in the "pre rules" section of the security policy, which is where I want the new rule to go as well.