I have done this - where the various firewall interfaces are bridged to
real, isolated nics, and to virtual internal networks that connect to VMs
with specific services.

The mistake is to think of VMware as an additional security measure. It can
be configured in a way to enforce a security arch...

[ more ]