diff --git a/pkg/compute/regiondrivers/jdcloud.go b/pkg/compute/regiondrivers/jdcloud.go
index cd0291cc3a..810c873890 100644
--- a/pkg/compute/regiondrivers/jdcloud.go
+++ b/pkg/compute/regiondrivers/jdcloud.go
@@ -1,7 +1,10 @@
 package regiondrivers
 
 import (
+	"yunion.io/x/pkg/util/secrules"
+
 	api "yunion.io/x/onecloud/pkg/apis/compute"
+	"yunion.io/x/onecloud/pkg/cloudprovider"
 	"yunion.io/x/onecloud/pkg/compute/models"
 )
 
@@ -31,3 +34,11 @@ func (self *SJDcloudRegionDriver) IsOnlySupportAllowRules() bool {
 func (self *SJDcloudRegionDriver) IsSecurityGroupBelongVpc() bool {
 	return true
 }
+
+func (self *SJDcloudRegionDriver) GetDefaultSecurityGroupInRule() cloudprovider.SecurityRule {
+	return cloudprovider.SecurityRule{SecurityRule: *secrules.MustParseSecurityRule("in:deny any")}
+}
+
+func (self *SJDcloudRegionDriver) GetDefaultSecurityGroupOutRule() cloudprovider.SecurityRule {
+	return cloudprovider.SecurityRule{SecurityRule: *secrules.MustParseSecurityRule("out:allow any")}
+}
diff --git a/pkg/multicloud/jdcloud/securitygroup.go b/pkg/multicloud/jdcloud/securitygroup.go
index a4b04eeefd..10b9bb3720 100644
--- a/pkg/multicloud/jdcloud/securitygroup.go
+++ b/pkg/multicloud/jdcloud/securitygroup.go
@@ -61,7 +61,9 @@ func (sg *SSecurityGroup) GetRules() ([]cloudprovider.SecurityRule, error) {
 	rules := sg.SecurityGroupRules
 	srs := make([]cloudprovider.SecurityRule, 0, len(rules))
 	for i := range rules {
-		rule := secrules.SecurityRule{}
+		rule := secrules.SecurityRule{
+			Priority: 1,
+		}
 
 		if rules[i].Direction == 0 {
 			rule.Direction = secrules.SecurityRuleIngress