marciton, rswinter, It seems that the User-Agent string that is displayed on the IVE admin console is different than what is being sent over the wire. This is why I believe your browser restriction checks were failing. I confirmed this by comparing a SSLDump to what is seen on the admin page. There is actually a second space after JunosPulseiPhone that isn't being displayed on the admin pages.. To find out exactly what the User-Agent string is you will need to do the following: Navigate to: Maintenance --> troubleshooting --> tools --> TCPDump Next choose the external interface and then click "Start sniffing" and then have your iOS client log in. Click stop sniffing right away, and then when it loads the next page up on the IVE you will have an option to download the TCPDump. Where it says "Get" change the drop down from raw to SSLDump. This will open up the SSLDump in your browser. Search this log for the string "iPhone" and you should be able to quickly locate the User-Agent string.
... View more