Create the templates of firewall rules and let the templates be arranged into groups. The groups can be later applied to virtual machines.
We've been requesting a major overhaul of firewalling for some time. Not just groups that can be applied to a VM:
- Allow users to group their VM FW rules, turn a group on/off
- Allow users to add comments to rules
- Allow users to define a group of IPs e.g. ServerAdmins and apply a rule using that rather than having to create a rule for each IP.
- Allow users to define a group of ports e.g. AdminPorts (22,7080) and apply a rule using that.