CLI tool for nifcloud firewall api
list command display instances for which the specified FW has not been applied.
nifwall list -fw firewall-name
Also, you can specify more than one. In that case returns instances that are not applied either.
nifwall list -fw firewall-name -fw another-firewall-name
update command create firewall from yml file
nifwall update -f /path/to/firewall.yml
apply command apply the specified FW to the instances
nifwall apply -fw firewall-name instance-name ...