Untangle vlan for unifi ap guest ssid

Finally got it figured out.
Here are my final steps:

Untangle:

  1. Network>Add tagged vlan interface. Set parent interface to Internal.
  2. Set 802.1q tag,
  3. specify IPv4 scope,
  4. setup DHCP config (all default settings)
  5. Create firewall rule
    source interface is VLAN NAME
    destination interface IS NOT Any WAN
    Action Type: Block

Unifi:

  1. Create corporate network, enter gateway IP & Subnet from untangle vlan
  2. disable dhcp mode
  3. enable dhcp guarding, type in gateway ip from untangle vlan
  4. Create SSID in wireless networks, select network created from step 1

Thanks for your help fellas.