A client want to secure virtual server instance (VSI) as soon as it is provisioned...

You can use security groups to enact a set of IP filter rules that define how to handle incoming and outgoing traffic to both the public and private interfaces your instance. Use security groups when you order a virtual server. That way, your server is protected when it is first provisioned. Other Scenarios with solutions listed below : 1. Security scenario: Customers want granular control over traffic at an instance level (apart from network-level firewalls). However, at the same time, the costs of a shared hardware firewall can add up quickly if you need to protect multiple servers in different data centers. Solution: You do not incur extra charges for using security groups. You can use security groups for all virtual servers that need protection in any of our global data centers. 2. Security scenario: You want to avoid configuring firewall rules on each server separately. Instead, you want an easily manageable firewall solution that spans servers in different global data centers. Solution: Define N security groups for N different types of servers in your cloud workload. Manage all rules for a security group in one place. Manage the security group associations with the virtual servers.