Security

Has anyone noticed that after connecting to a captive portal with an iPhone running IOS 8, there sometimes is a delay with Apples captive network assistant displaying the "Done " option. This delay seems somewhat random but when it happens "Cancel" is the only option then after about 30 seconds "Done" is finally displayed. I know that you can disable CNA on the controllers captive portal configuration but this also preventst the splash page from automatically poping up when connecting. The user must then open a browser to recieve the splash page after it times out several hours later, but if they are trying to use an App, it isn't obvious that they need re-accpet via the splash page. 

Is there a way to setup the splash page so that once accepted it is never displayed again? It seems that the max timeout is about 4 hours or so.

I would greatly appreciate any help with this issue and I have attached an example of the CNA in it's delayed condition.

That's what I was affraid of, I will continue to troubleshoot why sometime there is a delay and others times there is not. Thanks

You're running into an issue that's addressed at https://arubanetworkskb.secure.force.com/pkb/articles/HowTo/R-1680

and http://community.arubanetworks.com/t5/Controller-Based-WLANs/What-config-on-Aruba-is-needed-to-Bypass-Apple-Captive-Network/ta-p/170040

and http://community.arubanetworks.com/aruba/attachments/aruba/aaa-nac-guest-access-byod/7071/1/AppNote_Apple_Captive_Network_Asst_Bypass_with_CPG.pdf

Unfortunately some of the information in the above seems to be outdated or not directly relevant to Aruba Instant. Or it may prevent the delay (good) but disable a useful Apple feature (bad).