Running a virtual firewall is convenient, but you must secure the hypervisor and management path:

Map the virtual networks to the appropriate ESXi vSwitches (Management vs. Trust/Untrust zones). Initial Config: