I've just setup 4 new Unifi access points with 2 network SSIDs one for the internal network and one as a guest network which is put on its own VLAN. The guest network only has access to the internet and is segmented from the rest of the network.
Everything is working perfectly except that all of my externally facing servers (ie. company email and portal) are not accessible from the guest network. We are using a Cisco ASA 5505 firewall which has a separate DHCP server for the guest network and is configured to use Google DNS.
Before you say anything I've seen other threads which suggest that DNS is the issue. There is nothing being blocked. Its set to permit all at the IP level. I can resolve the IP address from the DNS name. I get no hops when I use Tracert though and of course no ping.
One last piece of info is that I do have a Dynamic NAT rule setup on the guest interface for the guest network subnet set to one of my external IP's. This External IP is the same subnet as my other external facing server IP's. Also I've already checked this thread - "http:/
Any help would be greatly appreciated as I'm completely stumped at this point.