THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
Cisco VSG provides intra-tenant security model. With VSG, CloudStack can even provide Security Groups Isolation for VMWare Hypervisor. Additional VSG capabilities are highlighted at the link below:
http://www.cisco.com/en/US/products/ps11208/index.html
Additional details would be provided in the Functional Spec.