HP Thin client with HAOS on different vlan. What's the concept? Firewall rules?

Might this be a possibility?