Connecting two networks on L3 switches through firewall

Hi,

I'm having trouble connecting a management network to talk to a test network. 

I have two L3 switches. 

Management network is on SW1 as 10.20.20.X for servers (vlan 20) and 10.20.98.X for workstations (vlan 98).

Test network is on SW2 as 10.20.21.X (vlan 21).

I have a firewall in between so that traffic can pass from the management side to the test network but I don't want the test network to access management side.  

I feel I have the routes in place to allow traffic but the management side isn't able to ping the test side.  

Any advise on how to test/set up connections would be appreciated.