Mapping Firewall Policy to Forwarding Virtual Server

Rules are evaluated through the various contexts

You can only apply one policy per context, but you can assign multiple rules into each context.

You can build rules and assign them via tmsh. I suggest looking at the tmsh reference manual