Actually there is no way to use VLAN Tagging and Sophos Accesspoints on RED Sites if Standard/Split Mode is selected.
Why: If there is small internet connection on the UTM Site, it is useful to route the Internet traffic directly to local Internet router on the RED Site like Split Mode.