No changes have been made to the platform pre-fault, just seems to have occured.
Users can join Guest SSID and obtain DHCP IP from DHCP server (not on the IAP) but when trying to browse to anything in any browser, the URL is not redirected to the Guest captive portal.
Oddly the URL path does have /guest/registration.php applied to it, just not the internal DNS name.
Eg, "www.google.co.uk/guest/registration.php".
If i manually browse to the http://IP/guest/registration.php it loads, and i can complete the registration, but am then looped back to the same page.
When joined to the Guest SSID i obtain a valid DHCP address and can NSLOOKUP the DNS name of the Guest Captive portal successfully, internal DNS entries are unchanged and are correct.
The config on the IAP's is pushed out via AMP templates, and again - is unchanged and contains the defined auth-server, and external-captive-portal:
wlan external-captive-portal
server guest.company.net
port 80
url "/guest/registration.php"
auth-text ""