Creating a VLAN with LAN access only

On my HP E5412zl switch, how can I create a VLAN that has intranet access only, so our warehouse PDA's can access our servers (SQL etc) but cannot access the internet?

I am using Unifi for the wireless and have created another 'IntranetOnly' SSID and I can tag this to a VLAN.

I am hoping this way I can prevent those devices getting internet access.