Logical design using vmware ESXI/firewall aplliance/and virtual servers

[aeroworks]

Here is my setup:
Vmware ESXI server (host has two nics)
ESXI has 2 windows servers and sophos firewall appliance.
Apple airport extreme(handles wireless clients)
Cable modem (wan)

I want to be able to implement the sophos firewall in the best possible way to protect the virtual servers and the wireless clients. How do i hook it all up?

If i had everything hardware it's not too hard but im confused implementation when everything is virtual. where to plug everything into. maybe wan to nic1 than airport to nic 2?

 

[bendsley]

The setup attached is probably what will work best. Attach your wireless stuff to the switch.

For your VMs on the esxi box, they would need to route through the firewall vm and then pass to the external NIC. I only put that picture up there because by not having an external switch behind the internal NIC, you severely limit yourself.