Nevermind. Fixed it.....turns out you have to click the bright orange "Apply" button AND "Save"....just like it says in the interface.
packet capture or at least live firewall logs to see if the packets are received. If not, maybe there is a port isolation on the switch.