Skip "broken rules" (with empty cidr field) in security group migration