Hi,
What state is the client in during this? Can you attach a copy of 'debug client <mac address>' for a client going through the process?
Do you have a pre-authentication ACL permitting access to the external web server?
Does DNS respond to the external web server address and are DNS lookups permitted via that pre-ACL if there is one?
Thanks,
Ric
-----------------------------
Please rate helpful / correct posts