We'll need to know a little more about your network. Do the Guest Users have to authenticate via Captive Portal? If you do not see the Captive Portal are the clients being assigned a valid and working DNS server?
Do the Guest clients src-nat behind the Virtual Controller? If so is all the necessary firewalls and return routing correct in place?