10G firewall for filter intervlan traffic

Hi!

We are looking for redundant feasible cost firewall just to filter intervlan routing traffic. I want to only allow some traffic from user vlan to some critical servers vlan. similary Development users can reach to all servers where other normal users can only reach to some specific subnet.

We will not use this firewall as edge firewall as we already have Fortigate 100E in place for that.

Please guide in this scenario.

​

Thanks