1. A system, comprising: a processor; and a first memory device, the memory device tangibly embodying a set of instructions to permit the processor to: retrieve a document comprising a workload definition document that defines an intended virtual configuration to include at least one virtual machine and at least one network appliance to be associated with at least one of the virtual machines in the intended virtual configuration, each network appliance respectively serving a role in the intended virtual configuration of transforming, inspecting, filtering, or otherwise manipulating all network traffic, before said network traffic reaches an intended virtual machine, for purpose other than a data packet forwarding in a virtual configuration; parse the workload definition document to extract attributes of each of the network appliances, including one or more security policy to be applied to each network appliance; extract configuration data from the parsed workload definition document that is related to any security policy of any of the network appliances to be deployed; and access a security template library to select a security template for each network appliance that will implement the one or more security policies for that network appliance to be deployed.