Not too sure how to go about curing IOS problem, on my android I was able to download older version of the app and fixed, your hands ar slightly more tied with IOS appstore though.

I have several of these routers implemented and I can confirm on the routers that I haven't gotten round to updating that these ports aren't shown as open, on the latest firmware however the following ports are showing as open on a completely fresh f...

As a work around you can add tls-cipher "DEFAULT:@SECLEVEL=0" to your certificate and it will allow you to connect. Obviously the security element is still and issue but it allows connection.

I dont know if it helps or is associated but also getting this on the incoming logs  Kernel kernel: xt_TCPMSS: bad length (589 bytes)

Same issue here, it seems to be causing both client to gateway and gateway to gateway to drop out intermittently, off more than on though. Have just this minute carried out complete reset and sanitize config on the router and issue immediately came ...