Within a virtual network, you want to be able to monitor and filter VM-to-VM traffic. Use a hypervisor to create a virtual firewall. Route traffic from virtual machines to virtual machines through a real firewall and back to the virtual network. Use VRF technology to create a virtual router. On each VM, define VLAN memberships.