I tried to add rule to grant access (protocol:any) from Guest WLAN network (192.168.3.x) to only the gateway IP (Cisco AP) 192.168.10.200, but it does not allow to do it for a specific IP, only for the network segment, error "invalid mask for the ent...

Hi Karsten,  Thanks for prompt response. I applied firewall rule using the Access Point GUI (Guest WLAN Config > VLAN & Firewall) to deny any Guest WLAN access to the internal LAN, but also blocks the internet access. It seems that rule blocks also t...