ISE 3.2 p7 iPhone CNA and Guest portal AUP page loop

[Feds]

Greetings all,

Is anyone aware of a recent issue related to AUP page on Guest portal simply looping when AUP accepted via iPhone (18.3.2, 18.5.x) CNA? ISE is 3.2 patch 7.
User scrolls AUP to the bottom, then clicks the now-active Accept button, then the top of the AUP text is presented again with no apparent reload of the page from ISE node, and Accept button is disabled again. This in loop.
On same iPhone when redirect to portal is triggered with Safari or Edge, user can get past AUP on first attempt.
Current portal config for AUP page is is "Include an AUP on page", "require scrolling.." and "Show on first login only".
Neither CSCvz90852 or CSCvq85414 seem to match and I can't find anything more specific or recent in Community or elsewhere.

Win and Android are all working fine.

Many thanks,
Feds

[balaji.bandi]

is this worked anytime before with apple phones ? or is this broken after upgrade ?

what kind of WLC controller and code running ?

how about any Iphone with Lower iOS version ?

[Feds]

Hi BB,

Thanks for replying.
Guest redirect with iPhones has given us headaches from time to time, but nothing specfic affecting AUP page.
So I'd say AUP was working before for iPhones.
First complaints seemed unrelated to latest ISE patching or WLC upgrade.
9800-CL HA (Act, Stdb) running 17.9.6 .
Will test an oldish iPhone and let you know.

Just to confirm, do I have to deny (AKA allow...) traffic to captive.apple.com in redirect ACL?
Again, since AUP with Safari or Edge on the same iPhones works well, I'd think it's a CNA-specific issue.

Cheers
Feds

[Feds]

Hi @balaji.bandi ,

Tested iPhone 7 running 15.8.4 (installed 31/3/2025, https://support.apple.com/en-us/122345) and it does the same - Cannot get past the AUP page with CNA, but opening the portal with Safari is OK.
I have a TAC case open but struggling to get an update on existing known bugs or other SRs.

Thank you
Feds

[balaji.bandi]

May be need to enable debug and check the status when the page redirecting what is causing the issue.

Since you have TAC issue opened i stick to TAC case and go with suggesting steps

[Feds]

Hi @balaji.bandi,

Thanks. Done that. TAC requested HAR file from iDevice when Apple CNA is used however the app doesn't appear in the list in MacBook's Web Inspector, unlike other browsers.
Will post an update when available, but I guess this issue is not that common if I can't find other posts.. or people have given up and are using a browser instead of CNA.

Kind regards
FedS