Isolate a single VLAN from the other VLANs. Using XSM7224S

Hello everyone, 

I have an XSM7224S where I am able to route VLAN traffic before it hits the firewall. I have 20 VLANS. I want all devices on VLAN 14 to be isolated from all VLANS with the exception of 4 printers that sit on VLAN 8. In addition, I want all VLANs to be able to get to the internet. I just want VLAN 14 to be the isolated VLAN (with access to those printers on the different subnet). What would allow me to do this? Anyone willing to point me to the steps necessary to get this done?

My setup:

Internet <-->Firewall<--->XSM7224S<----> More Switches <----->Network Devices

Cannot do this at the firewall level as the XSM7224S is doing VLAN Routing