After firing up two new EWS660AP's I had to contact support to get new firmware as Guest mode wouldn't route. So with this being said we already know the engineers are being sloppy in their testing before releasing firmware that should be tested.
With this to the side. Lets ask.. Since Guest mode is designed to keep Guest from seeing or interacting with the private network. Why in the world would captive portal point back to the IP address of EZ-master ? Not only are we immediatly giving away the IP Scheme of our private network, But we are also providing direct access back to our private network from the guest side ???
Captive portals main mechanism is used for alerting guest to the fact that they are indeed on a guest network and their activity may or could be monitored when used. Or to alert them that their access may even be restricted from certain content. With this in mind. Don't you feel that traffic should be kept inside on the Guest network until the user agrees to your terms.
Engenious, Please fix the fact that this doesn't work as well as your thought process in keeping this traffic seperate.