VMware vCloud Networking and Security App is a hypervisor-based, vNIC-level application firewall that controls and monitors all flows between virtual machines in a virtual datacenter. Firewall policies can be applied to vCenter containers or security groups, which are custom containers created through the vCloud Networking and Security Manager UI. Container policies enable the creation of mixed trust zone clusters without requiring an external physical firewall. vCloud Networking and Security App also supports classic five tuple firewall rules.