We have a separate guest and BYOD portal group for wireless. We have CNA disabled for both networks due to the forwarding issue with apple devices (well documented).
Our issue is with our BYOD portal. When the user trying to register an iphone/ipad into the BYOD portal, the user lands on the ISE portal which detects it's an apple device. When hitting next, it fails with "browser not supported".
I have found documentation that this is due to having CNA disabled - but if we do that, the apple devices cannot see the ISE portal. Any ideas? We are running ISE 3.1 with a 3405 WLC.