I am glad to hear the issue seems largely resolved and thank you very much for taking the time to report back about the solution.
ZA support does not help user on creating/managing expert rule (per policy) but they should be able to collect issues to escalate to development. I guess for this case many users reported the issue and therefore the problem was positively moved up to development team for review.
This is why its important, if you encounter an issue that you can consistently replicate, to report it directly to ZA technical support.
I will revise the title of the thread to hint to the solution.