This morning, I had an issue with two MacOS devices, both have been on our Corp wireless for several months. Today, they received the message "this network's administrator has prevented you from using the network".
Both devices had been assigned a custom policy blocking access to the corp Wifi.
I assume it's possible, though unusual that the device has specified a different User-Agent string from all previous authentication requests, or could this be something else? and is there somewhere I can identify the cause. The event log's for the affected device are limited.