ISE 2.3. does not support Apple Captive Network Assistant (CNA) on iOS 11.2

[Akim24836987]

Good Day
We have:
ISE 2.3.0.298

WLC 2504
Ipad 11.2.6

When authorizing and redirect to the BOYD, the portal displays the message: "Your browser is currently unsupported".

In the authorization logs you can see that the profile is indicated by Apple-Device
Something similar was with the previous version, how can I eliminate it in this one?

[paul46]

Plz elaborate more on issue and post your RADIUS logs

What troubleshooting has been done so far at your end?

[Akim24836987]

I created authentication profiles:

Name: BYOD-SUPP

Check the box for Web Redirection and from the drop-down, choose Native Supplicant Provisioning. In the ACL section, type in GUEST-REDIRECT. In the Value field, choose BYOD Portal (default)

Name: BYOD-REG
Conditions: NetworkAccess:EapAuthentication equals EAP-TLS
Endpoints: BYODRegistration equals Yes

ACL GUEST-REDIRECT:
Permit requests to the dns servers
Permit requests to the dhcp servers
Permit requests to the ISE servers
Deny any

ACL WLAN-PERMIT-ALL:
Permit ip any any

Then I created policy:

Name: BYOD-SUPP
Conditions: AD1:ExternalGroups equals BYOD-Use
Profiles: BYOD-SUPP

Name: BYOD-REG
Conditions: BYOD-REG
Profiles: WLAN-PERMIT-ALL

RADIUS Livelog in the attachment

[Akim24836987]

detailed log of the latest two events

[Akim24836987]

detailed log of the latest two events