ISE 2.4 + iOS + AUP as-link problems

[scott.stapleton]

Since upgrading to 2.4 patch 9 (from 2.3 patch 4), clicking on the as-link, AUP on a sponsored guest portal on iOS does not result in any action; that is, I am not taken to the AUP page; I just stay on the login page. Android, Win7, Win10, etc. are fine. I've tried the identical AUP HTML that I am using in my lab ISE and I have the same issue on 2.4 (no patches). This is within the CNA; if I open Safari and try, it works fine. I've replaced the HTML with a basic AUP (i.e. - no explicit HTML, just the word test) and I have the same issue, so the HTML itself isn't causing an issue.

The Contact Support link works fine.

This issue occurs on both iOS 11 and iOS 12, on both iPads and iPhones.

On-page AUP or bypassing the CNA are not acceptable works arounds.

Could someone running 2.4 (any patch level it seems) please confirm that they can open the AUP link on iOS 11/12, within the CNA mini-browser. This will help me direct my trouble-shooting.

[howon · Accepted solution]

This started with iOS 10.3.1. I believe the Apple CNA (Captive Network Assistant) was updated with more restriction on java script and that portion of the script is not being allowed. I suggest using page based AUP instead, however if you would like to get it addressed, I can create a defect that you can file TAC SR against.

[scott.stapleton]

Cheers - I suspected this was a CNA issue that was triggered by a change in ISE which sounds like the case.

If you could log a defect I will log a TAC case.

[howon]

FYI, two workarounds:

1. Use 'On page' option in the login page

2. use page based AUP in a separate page instead:

[scott.stapleton]

Cheers.

I'm familiar with those alternatives but they're not acceptable.

Whilst this is a change on Apple's side, this iOS version has been out for almost 2.5 years so it seems strange this hasn't been fixed yet (in ISE).

[howon]

Please open a TAC SR and have them reference CSCvq85414. Should be visible to you in a day or two.

[awatson20]

Were you able to resolve this issue?  We have this same problem and are on ISE 2.4 Patch 11.  With AUP as a link, we get the 400 error on Apple clients using the captive network assistant

[Jason Kunst]

---

@awatson20 wrote:

Were you able to resolve this issue?  We have this same problem and are on ISE 2.4 Patch 11.  With AUP as a link, we get the 400 error on Apple clients using the captive network assistant

---

Adam thanks for bringing this up again and also opening your TAC case. Would be good to see what others are experiencing

[awatson20]

Still no fix yet to this issue.  TAC is addressing, and working with ISE Development group.

[Jason Kunst]

Its just a link like the others. So it should be compatible I would think, otherwise its a defect. @scott.stapleton  would be good for you to log a customer found defect with TAC as that will get better priority. Please do keep us updated

[Jason Kunst]

Please do get a tac case open

[awatson20]

Curious what you did to get around this issue?  Did you implement the AUP as a page instead of a link?