On the mobile app you can click on guest network > Security Options > AP Isolation and toggle it on / off...
I can't check on the web interface if there's a toggle as my brume 2 doesn't have WiFi but you sure there's no option, seems odd?