Internal Firewall

I have a flat network (10.10.x.x/16). We have a group that needs to be segmented from rest of the domain. we will be using a firewall. Thoughts and suggestions are appreciated.

Thanks
Fly