Hello Daryl,
Please confirm your SZ version, after 3.6 (5.x) you must disable Bypass CNA so captive portal can be displayed, in this new versions we have Portal Detection and Supression function not present in previous versions. This also works for apple devices.
Regards,
FABIAN GARZON
Principal Technical Support Engineer