Wireless flow inspection solution in SD-WAN multi-domains

A device associated with a first network domain, comprising:

• a processor;
• at least one network interface controller configured to provide access to a network;
• and
• a memory communicatively coupled to the processor, wherein the memory comprises a flow inspection logic that is configured to:
• receive a control and provisioning of wireless access points (CAPWAP) packet from an access point associated with a second network domain configured to communicate via a software-defined wide area network (SD-WAN), the CAPWAP packet encapsulating a wireless local area network (WLAN) frame;
• identify whether an Inspect flag is present in a header of the CAPWAP packet;
• and
• inspect the WLAN frame encapsulated in the CAPWAP packet in response to a presence of the Inspect flag in the header of the CAPWAP packet.

A device, comprising:

• a processor;
• at least one network interface controller configured to provide access to a network;
• and
• a memory communicatively coupled to the processor, wherein the memory comprises a flow inspection logic that is configured to:
• generate one or more capture policies associated with inspecting wireless local area network (WLAN) traffic, wherein an action portion of the one or more capture policies includes setting an inspect flag in a header of a control and provisioning of wireless action points (CAPWAP) packet;
• and
• transmit an indication of the one or more capture policies to at least one of an access point (AP) associated with a first network domain or a network device associated with a second network domain different from the first network domain, wherein the first network domain and the second network domain communicate with each other via a software-defined wide area network (SD-WAN).