Sounds like a routing or DNS issue. Can you ping the mgt interface of the controller, then the gateway, then an outside IP? If you can't do any of these check to insure your VLAN for client service is on all the switches in the network. I would also check any ACL or Permits lists on your network. If you can ping all the addresses but no with the website name then it is a DNS issue and you need to resolve that. All of those could be a result of a faulty DHCP scope configuration.