iOS 11

Question

Hi, 
 
 My college uses a captive portal web based authentication system on a Sophos UTM on their Wi-Fi. Since updating to iOS 11 when I connect it connects for a few seconds and gets a DHCP lease and then the connection just drops. Before I have a chance to login. They were able to reproduce the issue and said it's an iOS 11 issue then and I'd just have to wait for Apple to fix the bug. I don't think they're going to raise it with Apple or Sophos. 
 
 Has anyone had issues like this? I'd appreciate any input.

aponzo · Accepted Answer

Looks like installing the Sophos Proxy CA on the iOS 11 Device and trusting as a Root Certificate solved the issue! Been hunting this issue for weeks!! 
 For those interested... Deploy Sophos Proxy CA (step 3) - https://community.sophos.com/kb/en-us/115315 Trust as Root Certificate - https://community.sophos.com/kb/en-us/126895

William Gault · Answer

One important point to check if using SSL filtering, is to ensure that the Sophos site certificate is installed and ensure that it's trusted in the certificate store found under General, About within iOS 10 and up. While this wasn't an absolute necessity in the iOS 10 series, it seems this makes all the difference in the world with the latest iOS. 
 I've also noticed that while you may have run through the certificate install in iOS 10.0, for example, in 10.3.3 or 11.0 the certificate is no longer trusted so you have to go into the certificate store. Or in other words the trusted certificate somehow becomes untrusted after a later update (and you need to trust it again).

Karlos · Answer

Hi NicholasHayman 
 Can you show us the relevant log outputs of your wireless and authentication logs when connecting from your iOS 11 device? Also, what UTM firmware version are you on? 
 Thanks, 
 Karlos

DouglasFoster · Answer

My family members report that this is a global problem with ios11, and that it affects every type of wifi. I do not think UTzM can work around it.