[ovirt-users] Network rules

Hello, I'm new, so forgive me if this is stupid or in the wrong place. Because of security reasons, I want a network, where my VMs can talk to one single VM (eg. proxy or management), but not with each other or the host machine. Is there a simple way to solve this, without creating dozens of networks? Jürgen