1.1.1.1 used to work, but that was bought out recently so it might not work any more. You should be able to try to browse anywhere and then get redirected to the cwp as far as I understand.
You'd want to add the CVG to the NG device inventory and move your keys over when you're ready. Pretty sure you'd have to remove the device from the Classic inventory or you'll get an error that the device already belongs somewhere else.
You should be able to go to home, then administration, then hivemanager operations, and update software. Classic supports AP110/120, AP122/122X, AP121/141, AP130, AP150W, AP170, AP230, AP245X, AP250, AP320/AP340, AP330/AP350, AP370/AP390, AP550, AP11...
I think you want an IP firewall to control what sites users can reach, and you can set schedules on different user profiles (also where the IP firewall is) to enforce different IP firewall rules at different times. If you open configure, open the SS...
Your clients will only be able to reach other clients on the same VLAN. I think the easiest thing for you would be the guest internet access only firewall policy in the UP, which will block all internal resources but still allow internet access.
