Hello

I have the next situation. Company installed corporate spyware on work notebook. Since I work from home, I want to change network properties to limit access of work notebook to intranet resources but still enjoy ads-free experience. I want to limit work notebook from intranet access because it might scan other devices in network to access corporate "unmanaged" risks and also find anomalies in network traffic etc. So I need to have isolation for the device. I use Synology apart from DNS function with ADS block also for syncing personal work documents from work notebook to FTPS server on it.

Currently my intranet looks like this:

- Synology: File Server + Ad-Guard as docker instance

- Work notebook

- Phone

- Personal PC

- Personal Notebook

As primary DNS i have Synology (but it can be pi-hole, etc).

I want to have 2 virtual networks:

Intranet: 

- Synology: File Server + Ad-Guard as docker instance

- Phone

- Personal PC

- Personal Notebook

Primary DNS: Synology

Guest WI-FI (As I understand there devices are isolated from communication to each other):

- Synology: File Server + Ad-Guard as docker instance

- Work notebook

Primary DNS: Synology

Question:

Will it be possible and how to have Synology as primary DNS server on both intranet and Guest Wi-Fi?

Will it be possible and how to have Synology as FTPS server on both intranet and Guest Wi-Fi(with isolation from intranet access)?