Deploy vShield manager OVF, then install vShield App in each host you want to protect VM's, Yo can create a group of VM's and apply firewall rules to them.
You can follow this guide (only the part of vshield)
http://www.vmware.com/files/pdf/products/vCloud/VMware-vCloud-Director-51-Evaluation-Guide.pdf
Regards