Configuring AP6 420 with VLANs

You can select between two general mode in AP6: VLAN or LAN Bridging. 
VLAN Bridging gives you the option to segment the traffic on a firewall. For this to work, you have to configure the VLAN on every component between AP6 and Firewall (most likely the switch). 
Then you can also use Guest Network, which activates a firewall on the Ap6 and only allows traffic to the internet. 
I would always recommend to use Bridge to VLAN and do the segmentation on your firewall for all VLANs. 

Thanks Toni for your answer.
If I understand you well, the best way to configure our AP6 devices would be to let the SSIDs on a "Bridge" mode and then do VLANs inside of the firewall ?
In that case, our FW (XG3100) will have the DHCP role ? The APs will be on the WiFi zone ?
Is this something comparable to this article ? (Sophos Wireless: Deploying Sophos Firewall with Switch and Wireless + Guest VLAN with AP6-420)
If we let the SSIDs on a bridge mode, will the devices be able to access other devices if we don't use a Guest Network ?

Thanks Toni for your answer.
If I understand you well, the best way to configure our AP6 devices would be to let the SSIDs on a "Bridge" mode and then do VLANs inside of the firewall ?
In that case, our FW (XG3100) will have the DHCP role ? The APs will be on the WiFi zone ?
Is this something comparable to this article ? (Sophos Wireless: Deploying Sophos Firewall with Switch and Wireless + Guest VLAN with AP6-420)
If we let the SSIDs on a bridge mode, will the devices be able to access other devices if we don't use a Guest Network ?

Yeah the read is what i was talking about. 

The Firewall will do the full scale DHCP and firewall. 

Thanks Toni,

Will give it a try and let you know.

Hello Toni,

Today I was able to adapt the configuration or our L3 switches and can confirm that everything is working.
Thanks again for your cooperation and validation.

Best regards,
Octavio