Cisco :: 5508 Controller - IPad Network Access

I recently had a 5508 controller installed and configured for a corporate network as well as internet only guest access. Users authenticate via 802.1X key management on the corporate network and web authentication via guest. This works fine, however, I've run into a problem. We also use iPads for inspections and the inspection site is housed internally. I've had a network admin create an exception in the firewall that will allow connection to the internal sites from the guest network, however, it does not function. I did find that if I connect an iPad to the corporate wireless network I'm able to download the necessary certificate to the device but that only works if I use my login information which is not something I am interested in doing. Is it possible to enable another authentication for the corporate network without breaking the functionality of the existing 802.1X authentication? What could possibly be the cause on the guest network not allowing connectivity to the internal sites, even though the exception has been created?