You need to setup a multicast policy to allow the SSDP to traverse vlans. You will also need a firewall policy to allow the clients to talk to the hue bridge as well.
The multicast policy is hidden by default. Go to System > Feature Viability > enable Multicast Policy. Then you can create the policy:
