I'm struggling to setup a guest SSID on our Ruckus ZoneDirector 1100 running v220.127.116.11.29. I have got as far as having an open guest SSID which when connected, prompts the user to accept the T&Cs without requiring authentication but never actually redirects to the internet. I have setup WPAD on our internal DHCP/DNS which points all external traffic via our externally provided proxy. This appears to work correctly in that clients connecting to the normal security enabled SSID are correctly routed. I suspect the issue lies with the fact that our internal network and proxy are on different networks but I am stuck. Attached is a capture of the guest ACL rules setup on the ZoneDirector.