E-Mail Server Access Control

[ashour_shamoon]

Hello,

I am running a vSZ and R550s. They are all up to date.

I have a WLAN that I am working on for Corporate Owned Mobile Devices, basically company phones that come and go. We want this to be isolated from the share resources and basically only want these devices to be able to browse the internet and E-Mail. 

This is where I am stuck... 

I have created a DHCP Pool using VLAN 122. I am using this in the WLAN configuration. I get an IP address and am able to connect and browse the internet no problem. I am using standard authentication with WPA2 and a password.

When I am connected, I receive notifications on my phone through the E-Mail app that I have received an E-Mail. I am not able to send or receive any emails on the app though, it never loads even though I get the notifications. If I try to go to the Web version using the web address, that does not work/ load either, BUT if I use the IP of our email server I am able to get to the Web version no problem. I can also ping the IP, but not the name. 

I am thinking it is something with DNS. I am using Google DNS Servers and was thinking that I should make a DNS Profile and use 1 Google and our Local DNS. To do that I would also need to make a L3 Access Control Policy to allow DNS. I am thinking the subnet of VLAN 122, turn off the source and destination ports then turn off the destionation subnet and just use the IP of our DNS server?

Does it sound like I am on the right track or is there a better solution?