You can add rules to block access to the wireless network according to group membership. This is a complete block to the wireless network, not just to the Internet. You can use Guardian to block access to the Internet, but still allow access to the wireless network.
A default rule, All other groups, is provided as a "catch-all" for those cases where a user group doesn't have an associated access control rule. The default behavior is to allow access to the wireless network.
Note: The Access control rules table isn't an ordered table of rules. Block actions take precedence when rules overlap, such as when a user is a member of a two groups, where the behavior for one group is to block but the other to allow.
Something not right? Send us feedback.