The GMS users can hit the Internet just fine (so their data connectivity
via the ISP works) but they cannot hit any intranet sites.

Any ideas on where to configure this?