CWA Web Redirection to ISE - Not working for Android Devices

[steigja]

Hello All,

    We have a 5508 Wireless  LAN Controller running 7.6.130.0 and Cisco ISE running 1.2.0.899 patch 17.  The issue is that when Android devices join the CWA redirect WLAN they are not getting redirected.  They do get the correct CWA access list applied, because they cant go anywhere at that point.  But the redirect and login screen never shows up.  This does work for apple devices such as iphones.  So I know at that point it cant be a network issue.  Anyone having similar issues with these combinations of code?  Thanks

Jason

[nspasov]

Hi there! A coupe of questions:

1. What AP models are you using

2. Are you using Flex-Connect

3. Is there a reason that you are running 7.6.130.0? That particular release has been deferred by Cisco, thus it is highly recommended that you either downgrade to upgrade to a different release. There is a very good chance that you are hitting a bug of some sort.

Currently, Cisco recommends:

- 7.4.140.0 (If you have to downgrade)

- 8.0.121.0 (if you have to upgrade)

Thank you for rating helpful posts!

[mtarantino]

I have the same issue - WLC at 8.0.120.0 and ISE 1.3.0.876 patch 5.  3502 AP no flex connect.  Built a new portal in 1.3 and Apple devices work fine but Android devices never get the web auth redirect unless I specifically attempt to browse to any site.  previous 1.2 version of portal would push redirect to web auth portal.

[Craig Hyps]

It is expected behavior that user must attempt to browse somewhere before being redirected.  You can verify redirection policy when view client session details on WLC for that particular MAC address.  We do not support auto-redirect with pseudo-browsers and typically required captive portal bypass to be enabled.  For basic redirect flows like CWA, we are seeing no issues from iOS clients with Captive Network Assistant and bypass disabled, but if one client has issues, then often need to disable for entire controller.  This feature is currently a global only option, not per WLAN or client OS.