I have been playing around with configuring vlans to get the same effect (and a lot more). I don't have anything final (it requires a complete replanning of my existing network), but by creating multiple vlans it seems possible to have the firewall controlling access between the different vlans...