You can add firewall rules to a firewall policy by inheriting rules from a parent group. To inherit the rules from a parent group, the subgroup's policy must be a non-shared policy.
If the group inherits all of its policies from a parent group, this option is unavailable.
To add inherited firewall rules from a parent group
In the console, open a Firewall policy.
On the Firewall Policy page, click Rules.
On the Rules tab, check Inherit Firewall Rules from Parent Group.
To remove the inherited rules, uncheck Inherit Firewall Rules from Parent Group.
See Editing a policy.