I ran across the same issue and drove me crazy. The problem was with the use of the object "any". The configuration parser is having trouble with it. You basically have to create an object for the subnet 0.0.0.0/0 and use that instead. The bug has be...