This counts the total number of individual ACL rules configured across all profiles device-wide, a finer-grained capacity metric than the profile-level count since a single profile can contain many rules (as cienaCesAclProfileNumRules tracks per-profile). An admin watches this device-wide total specifically because ACL rules typically consume scarce hardware TCAM/ternary-match resources, so a device can run out of rule capacity well before it runs out of profile-slot capacity. For example, an admin who has plenty of remaining profile slots per cienaCesAclRemainingAclProfileDefs might still be blocked from adding a new rule to an existing profile if this device-wide rule count is already near its hardware limit.