Whitelisted Access to Internet for vLAN - Sophos Firewall

Hello Steve Smethurst ,

Thank you for reaching out to the community, for VLAN10 you can create a web policy to restrict the traffic you desire with source network VLAN10. And for VLAN20 you can simply create a plain FW rule and not applying any web, app policy or simply using allow all policy with source network as VLAN20, refer "Add a firewall rule."

Thanks for your reply, So for VLAN20 I should create a Firewall Rule with web policy to restrict the traffic? 

For example : Allow google.com and youtube.com only to vLAN20

Can you please direct me a little more on creating web policy and attached that web policy to a firewall rule?

Yes, sure please find the useful documentation and video links below:

1.) Add a web policy.
2.) Add a firewall rule.
3.) Sophos Firewall v18: DPI vs. Web Proxy Filtering
4.) Creating Web Protection Rules [this is from Sophos for an older version but you can use it for a reference] 

Excellent, thanks for the links and help.