Veeam 12 Clean Room Firewall Connection

Watched video over Veeam Sire - Clean Room we have just covered a network refresh, Core - Edge Switch - AP but wanted to make use of old HP Switch 2920 with 10gb Gbic to rear this will be my clean room with referb of Arcserve UDP Server refresh install Windows Server 2025. Been looking at options on Firewall OPNsense Connection to both LAN that is Production - Clean Room to opt for Lenovo m720q with riser attached 2 x 10gb ports will configure 10gb Prod - 10gb Clean has any one created firewall rules for such connection or used firewall device to cover on / off question as my build as TrueNAS with NFS share this needs access over both connections. Any solutions to what members have done with such solution. Education secondary 6th form school