Add Network Security Groups feature from Microsoft Azure to WAP
In Microsoft Azure we have the awesome feature called Network Security Groups which allows us to specify port ACL's on either VM or subnet level. This is possible using Hyper-V Port ACLs (https://technet.microsoft.com/en-us/library/dn375962.aspx) but requires interaction from the service provider or a lot of scripting and integration with, for example, Service Manager.
Would be much better to expose this configuration to the tenants, possibly via Tenant Public API as far from everyone is using Service Manager. It might require the feature to be supported by VMM first, but I know there is a uservoice on the VMM page for that :-)