Here's a recent suggestion that was published into a KB article!
Sophos XG Firewall: How to configure a RED 50 with VLANs