Stateful multi-privileged sd-wan control connections

A system comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving, by a controller of a network, a request from an edge device to form a control connection with the controller and access the network, the request including a certificate;
• determining, by the controller and based on one or more criteria associated with the certificate, that the certificate is invalid and acceptable;
• based at least in part on the certificate being invalid and acceptable, moving, by the controller, the edge device to a quarantine state;
• and
• causing, by the controller, a notification to be displayed on a user interface, the notification indicating the edge device being moved to the quarantine state.

A method implemented by a controller of a network that manages control connections of a plurality of edge devices within the network, the method comprising:

• maintaining, for the plurality of edge devices, the control connections between the plurality of edge devices and the controller;
• receiving, from an edge device of the plurality of edge devices, data associated with a certificate of the edge device;
• determining, based on one or more criteria associated with the certificate, that the certificate is invalid and acceptable;
• based at least in part on the certificate being invalid and acceptable, moving the edge device from a valid state to a quarantine state;
• and
• causing a notification to be displayed on a user interface, the notification indicating the edge device being moved to the quarantine state.