Network separation with a single firewall