Broker server seating on DMZ zone

We are using RDS Server 2012 R2, with Brokers seating on DMZ Zone. Those two servers have not access to the Internet

How can I give them access, but still be secured. We are under a sonicwall firewall:

Thanks