Correct. By default all the ingress traffic is blocked and the egress traffic is allowed.
-Sanjeev -----Original Message----- From: Michael Phillips [mailto:mphilli7...@hotmail.com] Sent: Thursday, September 12, 2013 11:46 AM To: users@cloudstack.apache.org Subject: Security Groups So If I have created a zone with the "DefaultSharedNetworkOfferingWithSGService" network offerring. Created a VM using the default security group, which has 0 ingress rules, I should NOT be able to do things like PING that VM correct?