VLAN setup with no Internet access but needs one VPN Connection to access Internet

Question

I have successfully set up a VLAN between my XG 210 and two Netgear ProSafe Managed Switches. VLAN Clients are not allowed access to the Internet, but do have access to the Network Storage. This is all working beautifully! 
 What I need to do next is allow one of the VLAN Clients to access the Internet through a VPN connection and single user login. When I run the Sophos SSL VPN Client from the VLAN I can connect to the VPN, but I am still not able to connect to the Internet... 
 Thank you for any suggestions, 
 Patrick

KingChris · Accepted Answer

Hi Patrick Coy 
 Please follow KBA here: https://community.sophos.com/kb/en-us/122769 
 This KBA shows detailed steps on how to setup SSL VPN connection to the XG. You should be able to connect to the LAN interface of the XG for SSL VPN connection. From there you can then add a firewall rule with source zone of "VPN" and destination zone of "WAN" and attach the user identity to this rule. This will ensure that only the authenticated user can access the WAN. 
 Let us know how it goes. 
 Thanks!

Patrick Coy · Answer

I've got a solution, although not how I was originally trying to set it up. 
 
 I have two firewalls:
 
 Sophos XG 210 
 SonicWall 4500

The lone computer with Internet access for this project now sits on the SW4500, instead of the XG
 
 That way it can have full Internet access but not touch the internal network on the XG

When data needs to be transferred to or from the internal network to the Internet, then the approved user will log into the VPN
 
 From their that user will be able to complete their transfers!

Thanks for the suggestions, 
 Patrick