Wireless flow inspection solution in sd-wan multi-domains

Abstract

Described herein are devices, systems, methods, and processes for inspecting wireless client traffic in a software-defined wide area network (SD-WAN) deployment. A controller device may generate and send capture policies to various network devices, including, but not limited to, access points (APs), wireless local area network (LAN) controllers (WLCs), and edge devices. The policies may each include a filter field and an action field, which can be dynamically updated based on current network conditions and needs. Upon receiving the capture policy, the APs can filter the wireless traffic and set an Inspect flag in the control and provisioning of wireless access points (CAPWAP) header on the matching wireless packet. The edge devices or WLCs may then inspect the wireless traffic by checking the Inspect flag in the CAPWAP header. The technique may provide a more efficient and scalable solution for inspecting wireless client traffic, with minimal impact on network performance.