A routed external organization virtual datacenter network is protected by a vCloud Networking and Security Edge device that provides DHCP, Firewall, NAT, VPN, and static routing services. The vCloud Networking and Security Edge connects to the organization virtual datacenter network and the external network port groups.