I don't see anything wrong with it... maybe another set of eyes will help:
<vcloud:FirewallService>
<vcloud:IsEnabled>false</vcloud:IsEnabled>
<vcloud:DefaultAction>drop</vcloud:DefaultAction>
<vcloud:LogDefaultAction>false</vcloud:LogDefaultAction>
<vcloud:FirewallRule>
<vcloud:IsEnabled>true</vcloud:IsEnabled>
<vcloud:MatchOnTranslate>false</vcloud:MatchOnTranslate>
<vcloud:Description>Allow all outbound traffic</vcloud:Description>
<vcloud:Policy>allow</vcloud:Policy>
<vcloud:Protocols>
<vcloud:Any>true</vcloud:Any>
</vcloud:Protocols>
<vcloud:Port>-1</vcloud:Port>
<vcloud:DestinationPortRange>Any</vcloud:DestinationPortRange>
<vcloud:SourcePort>-1</vcloud:SourcePort>
<vcloud:SourcePortRange>Any</vcloud:SourcePortRange>
<vcloud:SourceIp>internal</vcloud:SourceIp>
<vcloud:EnableLogging>false</vcloud:EnableLogging>
</vcloud:FirewallRule>