Hi
they can be logically separate , create 5 svi vlan interfaces on the 4331 and assign each port to each vlan , that will logically separate the ports from each other , but then you would need to apply acls in/out on each svi interface to prevent them speaking to each other
