Hi,
Did you create another address entry while creating the security policy rather selecting previously configured address from the drop down list?
It should work, but remember to have more specific rules on the top and then the generic one.
Thanks,
Vikas