Thank you again for the assistance, I have reviewed the instructions and drawn pictures and come up with mock commands for my setup.
The only questions I have before I dig in are:
Do you know of a way to write a firewall rule to block any port and any protocol from source to destination? Does "application any" cover that or is it something else? I read your introduction pages on small business and home SRX and ESX configuration and it is not clear to me where the denys are in place for the firewall rules in the zones.
Last question. Is there a way to set up the management interface on the ESX so that I can just plug an ethernet cable into it and hook it directly up to my computer? Can I setup one port that is part of one of the three VLANs (work-vlan) on the SRX so that I can only manage it from that port to restrict access? If I cannot hook directly up to the ESX with my laptop is there a way that I can set it up so that I can manage the ESX from the work-vlan? I do not have the ability to set up another ethernet connection from my office which has the SRX to the ESX which is downstairs so I have to hook the SRX up to the ESX for "normal" traffic. Basically I won't have a management VLAN.
Thanks again!