You don't technically need the svi for for vlan 10 as the gateway is on
the firewall, but vlan 10 does need to be added to the Cisco switch. You
will need a policy from server to user... I don't see that listed
anywhere unless I'm missing something.....