VLAN Access to webmail

I have a new VLAN I created for Vendor Access to the internet via wireless. We have a few employees personal devices connected to this new wireless as well. How can I set it up so that employees can access webmail through this new VLAN but NOT have access to any network shares? My firewall is a Sonicwall firewall, any help/assistance would be much appreciated.