Ok so I opened a TAC case and all they could do is confirm it wasn't my wireless controller. I did however find out what was plaguing my network and hopefully this will help someone else. I found that there was a Mac OS X cache server on my network. For details on this see, http://www.nbalonso.com/os-x-server-caching/ Basically it registers with apple using our public IP and then any apple device on our network that try to download from apple from that same IP apple then points it back to the cache server on our network. The problem was that there were no routes back to that cache server as it was in someones lab. I was able to track down the server using a packet capture on my ASA to find out which device on my network was trying to reach lcdn-registration.apple.com/lcdn/register you can do an nslookup to see what the IP is, i don't know if it changes. Once I had the cache servers IP address I was able to trace the mac address back to the source and shutdown his network port. iOS downloads are now able to work again. The main problem was that iTunes, Mac, and even iOS 7 would try this but time out and then go download from apple anyways, iOS 8 however would never do get past looking for the cache server and the download would never start. Like I said I hope this helps someone else out there, apple implementation of a cache server is very poorly designed in my opinion if it can lead to this type of disruptive behavior.
