micro-segmentation

For ESXi if you run NSX you can apply micro segmentation to your VMs.

For the firewall you'd need fortiswitches, so in your use case you would just use PVLANs on the cisco switches instead.