Cisco WLC 5508 - ACL Permit-Deny

[Riimeister]

I have created an ACL rule in WLC where the goal is:
ip source: 10.20.116.0 / 255.255.255.0
dest: 10.0.0.0 / 255.0.0.0 (deny)

as I show like this.

the current result is,
dest to 10.20.111.240 (example) deny/reject
but the problem is that access to the internet (http and https) is also not possible.

what I need is ip source 10.20.116.0 dest http,https (internet) is permit

is there something wrong with the rule I created?

[Riimeister · Accepted solution]

Solved, Thank @Flavio Miranda !
i try change the DNS on DHCP Scope segment 10.20.116.0/24 like this