1.Create 2 Security groups:
SG1 rule=Tcp 22+Tcp80-Egress
SG2 rule=Tcp 22+Tcp80-ingress

2.Lunch 2 vm's in same network and different Hosts(Each one with different SG).
As it can be seen:
First vm 10.0.123.55 assosiace with Sg1
second vm 10.0.123.56 assosiace with Sg2

3.open ssh connection from 10.0.123.55->10.0.123.56 - connection succeed.

4.create additional Sg and associate to existing vm's:
vm 10.0.123.55 assosiace with Sg3
vm 10.0.123.56 assosiace with Sg4

5.open ssh connection from 10.0.123.55->10.0.123.56 - connection succeed.
6.Deassociate SG3 AND Sg4 from relevant vm
7.open ssh connection from 10.0.123.55->10.0.123.56 - connection failed.

Notes:
*******
**see in Karaf-logs date 31/10/16
**Logs locate in \\10.0.1.216\pub\zan_cohen\Bugzila_7066