Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Uncheck the "Network User" option on the security page of the WLC where the radius servers are configured. This option is a global config that will pass the users' crdentials on to the configured radius servers when web authentication fails.
If you have a guest internet dmz in place, you can simply connect one of the physical distribution ports to the dmz, and have the guest wlan pointing to that interface.
You might want to check the radio power levels on the AP's. If you have a dense AP deployment, the WLC may have auto-adjusted the power levels to a low enough point that the heat map doesn't appear.A quick test would be to disable an AP and see if th...