Comment 5 for bug 1223472

Thanks Akihiro for the comments. And Thanks Sumit for clarifying. Just to add, from this state, when a Router is available on the tenant, the code handles this by checking for firewalls on that tenant from the plugin and installs the policy. After which it sends a status back to the plugin at which point the firewall status will change to ACTIVE.

This is possibly a valid workflow if we think of the firewall as being pre-provisioned for tenant. But i think this is definitely something up for discussion in Icehouse as both of u have pointed out.