You are right. We have an option to move a rule to Shared, but we did not implement a feature to move/clone a rule between different DGs/VSys.
We will take note of this need and add it to our list of functionalities we would like to provide in Expedition 2.0, which it is currently under development.
... View more
All vsys have access to all resources, so they will just grab what they can until resources are depletes. You can, however, configure limitations per vsys. These are set in the vsys menuhin Device > Virtual Systems
... View more