If you set up the Guest Access built-in feature of the ZD, it automatically blocks access to internal resources/network and only gives them web access. You do have th eoption to selectively give them access to internal network resources (conference room printer, wireless presentation, etc.) if needed. There are other benefits to the Guess Access feature as well such as a policy splashscreen, bandwidth limiting, and more.