I lack a solution but would like to commiserate. We had some config errors on one of our VLANs, where DNS want reachable. The phones helpfully would just say no internet access and then bounce to 4g without any other sorry of error. What I would give to be able to just SSH into all these consumer services and just grep through the logs.