Accessing specific VLAN after VPN

Ah yeah that would explain it :)

IPSec is very easy to set up, don't be scared by the many settings - you won't really need to do much with then. As for the fqdn you'll set that in the client you're connecting from so it doesn't really matter from where.

With the Netgear IPSec client it's really easy and the support team can help you get it working.. There's a 30 day free trial so you can test it.

There's also a free third party client called Shrewsoft, it's pretty easy to set up too but some features seem hard to get working, I'd recommend the official Netgear client but if you want to give shrew a go I did write a small guide a while back for a very basic client-to-box setup with it;
http://www.hexnet.se/srx5308-ipsec-vpn-with-shrew-soft/

I think there's been some issues with shrew and certain firmware though, at some point you could only do mode config (which is what shrew's own manual shows) but I can't get that working with the srx5308's latest firmware.. However I didn't spend too much time on it, I'm sure it can be figured out.