Just a general suggestion here, as a first step, do some diagrams of your environment. Start with a general diagram and work from the top down to more specifics. Consider what goes into like buckets of use cases, and where use cases are different. All this vlan & firewall talk is downstream of design intent.