Do you mean you want a VM to be inline in the traffic path to other VMs? If that's what you want you can just configure a VM with 2 vNICs, one on an internal port group and another on an external PG, and have all VMs you want to have traffic traverse the inline VM connected only to the internal PG.