Smoothwall + iOS14 - Apps not loading

[mattpant]

Is anybody else having issues with the majority of apps that require internet access (Facebook / Instagram to name two) no longer working since upgrading to iOS 14 and needing a proxy server?

 

I’ve logged a support ticket with Smoothwall but so far heard nothing back (the last ticket I logged with them took months for them to respond!!)

 

I read somewhere that iOS 14 introduces dns over HTTPS so don’t know if it’s to do with that or what the work around would be so I can use apps again! It’s really frustrating as I’m quite often asked to post photos / messages onto our social media pages!

 

I’m also aware that iOS 14 introduced private addresses when connected to WiFi but I’ve disabled that in case that was the issue.

 

Thanks

 

Matt

[tmoon-mint]

Could be this?

 

https://support.apple.com/en-gb/HT211025

 

Can you try disabling HTTPS inspection for your iPads to see if the apps work again?

[mattpant]

I’ll check tomorrow but I’m pretty sure HTTPS Inspection is not enabled for the group my phone is connecting to and I get the problem trying to access the apps to upload to social media on that.

[pete]

Worked your way through this for SW settings? https://support.apple.com/en-gb/HT210060

[mattpant]

I’ve still not heard anything back from Smoothwall with regards to the open ticket I’ve got with them...

 

I’ve checked that the device I’m using is not set to have HTTPS Inspection (it’s not)

 

No idea what else!!

[mattpant]

I'm still having issues with iOS 14 and proxy server not opening certain apps - I'm still testing with Facebook / Instagram Apps -

 

I tried on an iPad with iOS 14 (14.3) installed and no luck - I then digged out another iPad (same model/version) using the same proxy details and still running iOS 13 (13.3.1) and Facebook / Instagram open up without any issues. So something in iOS 14 is definitely breaking things.

 

Smoothwall have looked into the issue but are struggling. I came across this post online with the same problem but a different App, and no answer (just standard Apple replies of things to try which were completely missing the point)

 

https://discussions.apple.com/thread/251863595

 

Anybody else found a solution??

 

Thanks

 

Matt

[Brimstone]

I'm still having issues with iOS 14 and proxy server not opening certain apps - I'm still testing with Facebook / Instagram Apps -

 

I tried on an iPad with iOS 14 (14.3) installed and no luck - I then digged out another iPad (same model/version) using the same proxy details and still running iOS 13 (13.3.1) and Facebook / Instagram open up without any issues. So something in iOS 14 is definitely breaking things.

 

Smoothwall have looked into the issue but are struggling. I came across this post online with the same problem but a different App, and no answer (just standard Apple replies of things to try which were completely missing the point)

 

https://discussions.apple.com/thread/251863595

 

 

 

Anybody else found a solution??

 

Thanks

 

Matt

 

I'd sugest it could be to do with your network settings...

 

https://support.apple.com/en-us/HT211227

[mattpant]

Thanks for that info, however I’d already checked / disabled that new feature which I mentioned in the original post.

 

I’m not quite sure what else there could be to try?!? Totally stumped!

[DGardiner]

Check your smoothwall, IOS stopped accepting certain certs a while back, you may need to recreate your SW CA.

 

though if you have ssl inspection turned off no idea

[bknaggs]

Can the iPads connect to anything just using a browser?

[ibpalle]

I am assuming you are using transparent proxy - please make sure the HTTPS method drop down for the transparent proxy use the option to allow transparent incompatible and filter others by certificate.

 

Additionally we do have an app category now in the blocklist - might be an idea to try to allow those. They are in IT and technical.

[mattpant]

Thanks - Smoothwall recently updated / recreated the CA's when they did a remote session to try and resolve the issue.

 

Hasn't made any difference. :-(

[mattpant]

Can the iPads connect to anything just using a browser?

 

Yes, using Safari - websites load up fine - including Facebook - it's just the App no longer works - it's as if something on iOS 14 is making the Facebook / Instagram App not proxy aware - but as mentioned before using iOS 13 on the same device with the same proxy settings - works fine.

 

I had another iPad I tested on today running iOS 13.x.x - installed Facebook / Instagram App - no problem - ran the update to iOS 14 (.4 now I think) and same as the other devices running iOS14 - Facebook / Instagram App broke striaght away - "No Connection / No Internet Messages"

[mattpant]

I am assuming you are using transparent proxy - please make sure the HTTPS method drop down for the transparent proxy use the option to allow transparent incompatible and filter others by certificate.

 

Additionally we do have an app category now in the blocklist - might be an idea to try to allow those. They are in IT and technical.

 

No, we don't have transparent proxying setup / but I think this would fix the issue maybe, as it's almost like it no longer knows about the proxy settings in place for the network connection and can't "see" the internet via the App (Other APPs work OK tho still) - not sure how we would change our setup to go down this route of putting in transparent mode.

 

I did try creating and hosting a .pac file with the proxy settings / port in place - but it didn't work with this either.

 

Smoothwall said they tested it using a transparent proxy and it seems to work for them - they were going to test with a non-transparent setup like ours but I've not heard anything back of their findings on this one yet.

 

The App Category settings have been tested with when Smoothwall did a remote support session.

 

Running out of ideas!

 

Thanks

[ibpalle]

In case you DO have a transparent policy in place and the Smoothwall is the firewall as well as the filter, please change the setting I described. Any applications not using proxy settings will be going through transparently - in addition, you could add Apple IP range to not be intercepted by the transparent proxy - you can add the IP range of 17.0.0.0/8 to the destination exceptions in guardian - web filter - exceptions.