Security and VDS

Hello All,

I am going to design a virtual data center by vCenter, In a portion of my project I faced with some servers that should be infected by malware and viruses.

Those VMs are hosting by Cisco UCS Blade servers, so I have virtual NICs instead of physical on my servers.

Now my question is: to separate traffic of those machine from rest of the network, what is your suggestion? create a separated VDS or adding separated VLAN on shared VDS ?

what are the benefits of separated VDS when at the end I have just one up-link between my blade and the rest of network?

Thanks

A.