From a workflow perspective, normally, when I create a project I also create a default security group for that project as well. The security group always has ping enabled globally, but often has ssh enabled either globally, or from all projects.
OSM should create a default security group, and should have a configurable default, or a set of defaults to choose through the interface.
Version: unspecified
Severity: enhancement