Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We are having issues whereby users on the Guest ssid which use web auth with mac filter failure are able to access the internet without even authenticating.
Make sure you have Setup preauth ACL allowing access to resources the user will need before L3 web authentication like dns, dhcp, radius server redirect page etc and deny everything else.
