I have the following policy that denies the creation of a new inbound port rule with port 3398, however, I would also like to add one other rule where it denies the creation