diff --git a/de/heat-templates/scripts/instance_boot.sh b/de/heat-templates/scripts/instance_boot.sh
index 82ef911..24b4dad 100644
--- a/de/heat-templates/scripts/instance_boot.sh
+++ b/de/heat-templates/scripts/instance_boot.sh
@@ -59,6 +59,7 @@
 UCP_MASTER_HOST=${UCP_MASTER_HOST:-${CONTROL_IP_ADDRESS}}
 UCP_IP_ADDRESS=${UCP_IP_ADDRESS:-$CONTROL_IP_ADDRESS}
 NTP_SERVERS=${NTP_SERVERS:-"ldap.scc.mirantis.net ldap.bud.mirantis.net"}
+DEFAULT_INTERFACE=$(ip route show default | awk '{print $5}')
 
 
 function retry {
@@ -295,6 +296,21 @@
 -A DOCKER-USER -j RETURN
 COMMIT
 EOF
+
+#Allow access to Internet from VMs for virtualized environment.
+cat << EOF >> /etc/iptables/rules.v4
+*nat
+:POSTROUTING ACCEPT - [0:0]
+EOF
+    for net in $FLOATING_NETWORK_PREFIXES; do
+cat << EOF >> /etc/iptables/rules.v4
+-A POSTROUTING -s ${net} -o ${DEFAULT_INTERFACE} -j MASQUERADE
+EOF
+    done
+
+cat << EOF >> /etc/iptables/rules.v4
+COMMIT
+EOF
     sudo netfilter-persistent reload
 }