Why don't rules work on TMG when they are duplicated/overlaid?

Question

proxy

The situation is such that when allowing rules are imposed on others, they start to work somehow incorrectly - they can fall off mutually.
Example - there is a separate rule that allows ICMP to go to the external network, when you turn on the rule "any access to the external, only one user", ICMP falls off to the external. when specified in the ICMP rule - everyone is allowed, except for this user, pings still do not go.
Here's another example - there is a rule that allows everyone to go to certain ip.
I raise a rule above it that allows a specific user to go anywhere, access for others falls off.
Why is this happening? (Does TMG not have a sieve principle - you forbid everything, and then you make holes in the right places for the right people?
At Kerio met the same. Obviously there is a gap in my knowledge somewhere.

Answer 1

I can’t speak for TMG, but in Kerio it all works fine.
Give examples of screenshots, maybe you are doing something wrong.