I am perfectly on board with nesting.Create aliases likePort_ApplicationHost4_DescriptionNet6_Descriptionand use groups. I am not missing anything and I would consider this best practice. I have been managing firewalls for 30 years.