So need some assistance....WAP371 with two ssid's: public and private....private vlan1 and public vlan 2....wap371 connected to netgear switch with tagged vlan enable...netgear plugged into asa5506...asa5506 configured to accept both vlans...with public access to internet only....private access to all. Everything works great as is but when I enabled the captive portal on the wap371 for the public wifi it does not work and they have not internet access. It is not the wap371 because if I remove the vlans and connect to the public ssid the captive portal works so it tells me that (I think) the asa is somehow not allowing that traffic back to the CP when the vlans are enabled. Any ideas?