Currently, the CCR cloud (Lake Effect) is behind a firewall and the only traffic allowed through to the cloud from the internet is for port 22 (ssh). Access from the UB & Roswell Park networks is open. If you require external access to your instance, you must submit a CCR help ticket requesting the ports you need open and the IP address of your instance. To avoid having to make frequent changes to your firewall rules, we recommend you associate an elastic IP address with your instance. Please see here for more information about elastic IPs.
Please note this is strictly for EXTERNAL access to your instance. You should be using Eucalyptus Security Groups to control who has access to your instances and from where as the cloud is open to all that are on the UB and CCR networks.