Symptom

Blackberry passport 5410 connects to a SSID passtrough, when it is being redirected to the webauth page it gets an error message that it cannot stablish the session with that webauth portal. In the packet capture we see that the SSL Server hello packet fragments are arriving out of order to the client.

Conditions

blackberry passport connecting to webauth SSID WLC using SHA256 certificate

Workaround

use HTTP or Enable TLS v1.2 on the WLC "config network secureweb cipher-option high enable" (if 8.2 release) "config network web-auth secureweb cipher-option high enable" (if 8.3 +) Please note if you are using 8.2 both webauth and webadmin will in with TLSv1.2.

Further Problem Description