Multiple Spectrum Application and firewall rules


I have create one zone with multiple spectrum applications, and I need to apply firewall rules to 1 spectrum zone. But I don’t think this is possible.

From the documentation, firewall rules seem to be applied at the zone level and not at per spectrum application level. I can’t have a rule that says allow all IPs on spectrum app A and another rule to say allow this X.X.X.X ip on spectrum app B.

Can someone confirm this?