Abiquo 4.6.1 enables you to define a default firewall for a virtual datacenter where firewall policies are available.
When the user creates a VM, the platform will assign the default firewall.
The firewall ruleset applies to VMs, not individual NICs on the VMs.
Changes to the firewall ruleset will apply to every VM in the virtual datacenter with the default firewall.
...
The user can remove the default firewall when editing the VM.
However, if the provider requires a firewall and the user does not supply another one, the platform will assign the default firewall again.
...
The administrator can also add or remove a default firewall when editing a virtual datacenter.
Note that you cannot set the default firewall before you create the virtual datacenter because the firewall belongs to the virtual datacenter and it must be created within an existing virtual datacenter.
...
When the platform creates a VApp from a spec, the platform will assign the firewall defined in the VApp spec.
If a VM has no firewall in the spec, and the virtual datacenter has a default firewall, then the platform will assign the default firewall to the VM.
...