How do I add routes to segment traffic for different groups of users

I am working on configuring our 4100 series devices to use separate web portals and physical interfaces for Partners, and Employees. Each pool of users will be assigned an IP address from a separate pool of IP addresses. I currently have the following configured, but need to understand how the FirePass boxes route traffic, and what is the best way to segment the traffic .

 

 

Following is the current configuration.

 

Master Group: Employee

 

IP Pool: 10.92.0/16

 

Eth 1.1 - Employee Public web portal. 172.168.20.1/24

 

Eth 1.3 - Employee Private interface connected to employee DMZ

 

 

 

Master Group: Partner

 

IP Pool: 10.93.0/16

 

Eth 1.2 - Partner Public web portal. 172.168.0.1/24

 

Eth 1.4 - Partner Private interface to Partner DMZ.