ISE Apple-iphone guest authentication problem

[mzarli]

problem with iPhone guest authentication with cisco ISE as

while we use the Wifi Guest SSID the redirection page opens for a second then

suddenly closes, while we've android phones and IPads that authenticate normally.

ISE 3.3 Patch 2 
WLC 9800-L

does anyone have an Idea ? or faced the same issue ? 
Cisco TAC Case already opened 

@Greg Gibbs 

[Mark Elsen]

                                     - As far as the wireless part is concerned :
   Have a checkup of the WLC 9800-L configuration with the CLI command show tech wireless and feed the output to : Wireless Config Analyzer

    - Also look into : https://logadvisor.cisco.com/logadvisor/wireless/9800/9800CWA

   - Further engage in full client debugging according to https://logadvisor.cisco.com/logadvisor/wireless/9800/9800ClientConnectivity , these debugs can be analyzed with Wireless Debug Analyzer

  - Outputs from the commands mentioned in https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/217738-monitor-catalyst-9800-kpis-key-performa.html#anc5 can also be useful

   - Check software version on the WLC 9800-L ; go for latest advisory = 17.12.3

   M.

[mzarli]

Thank you for your suggestions and guidance.

Unfortunately, the steps you provided did not resolve the issue. We have also tested with a WLC 5520, and the problem persists.

[Mark Elsen]

  - Then try to do the full client debugging on the 5520 too ; feed that into Wireless Debug Analyzer (too)
     Compare the session with the full debug on the 9800
                       For the 5520 go 8.10.196.0 (if needed) and try again

 M.

[mzarli]

We suspect that the issue might be related to the process of the captive portal on Apple devices. Do you have any  recommendations to address this specific problem?

[Mark Elsen]

  - Since the problem remains the same on both controller platforms (9800 ios-xe and 5520 with aireos) , it seems a 'local apple' problem indeed  ; you could for instance post the problem in :
                                       https://discussions.apple.com/

  M.

[MHM Cisco World]

Yes I think I have answer here

What is type of CoA ypu use  do ypu use interface bounce host port ? If not use it and check

MHM

[mzarli]

Thank you for answer. 
would you please provide more details ?