iOS TLS/HTTPS Falures on iOS only-Ruckus One-Android/PC Unaffected

[johnnymusd]

I’m seeing persistent TLS/HTTPS failures on iPhones/iPads only across our Ruckus One deployment.
Android, Windows, and wired clients work fine.

Environment
• Platform: Ruckus One (Cloud)
• AP model/firmware: R560/7.1.1.520.830
• SSID: WPA2-PSK, bridged to VLAN 10
• AI Assurance: analytics on, auto-remediation off
• Same VLAN/firewall rules for wired & wireless

Symptoms
• iOS connects, gets DHCP & DNS.
• DNS lookups succeed, but HTTPS/TLS sessions intermittently fail:
 – Google MFA pushes don’t arrive
 – ChatGPT shows “The network connection was lost”
 – Minga app loads but can’t pull data
• Android/PC on the same SSID have no issues.

Troubleshooting Done
• Locked radios:
 – 2.4 GHz: 20 MHz, channels 1/6/11, medium power
 – 5 GHz: 40 MHz, channels 36/40/44/48, DFS off, medium power
• Disabled: 802.11r/k/v, band steering, client isolation, AI remediation
• Applied explicit “Allow All” access control
• Captures show iPhone sends TLS Client Hello but often never receives Server Hello.

Has anyone experienced similar Apple-specific TLS issues on Ruckus One?
Any known firmware defects or hot-fix builds for iOS interoperability?

Thanks in advance for any guidance.

— Johnny Alves
Director of Technology, Middletown USD (CA)

[Ayush_Tripathi]

Hello @johnymusd 

Could you please confirm if you are seeing this issue only with the R560/7.1.1.520.830 AP model and version? May I know how long you have been facing this issue?

Could you please create a TEST WLAN with open authentication on the same VLAN 10 and then change it to VLAN 1 on the WLAN, and then connect the iOS device?

Please share the iOS version and model

[johnnymusd]

Yes I am only seeing it with those AP's and versions (R560 are all I have for AP's).  It was brought to my attention a couple of weeks ago.  Iphone 16pro max ios 18.6.2.  I do have a Test WLAN that does have open authentication and no restrictions.  I tested on VLAN 10 with the same issue.  I tried testing on VLAN 1 but could not get the device to connect to the internet.