OK, thanks. Looking for more granular control of host interfaces, but I guess that isn't an option. Maybe it doesn't need to be - I've been running vmware for years and didn't really think much about the issue on the hosts, but but I was a little surprised when I started looking more at the esxi firewall.
Thanks.