Hotspot gateway and policy route

Hi all,

I want to set 2 hotspot gateway for guest and user. Guest can visit internet only and user can visit internet and internal server(exchange, web..). I create 2 dhcp server for them with different IP pool. And I create 2 policy route by source IP. And I use tracert to test the prolicy. The prolicy route works well. I create two hotspot gateway for guest and user. But I find the guest can visit the internal web server after the guest login the hotspot. It seems the hotspot gateway work as proxy server and dns server for the guest client. What else should I do.

Thanks so much.