Healthy globally, unresolvable locally
A specific RADIUS, NTP, or cloud hostname cannot be resolved through the resolver at one site. Control shows the resolver, target, response, runtime, and affected scope.
Diagnostics Engine
Not only whether a service works—but where, for whom, and why.
A central ping or a green DNS status is not enough. Services must be tested from the network and scope in which clients and access points actually use them. Control runs targeted checks across individual APs, entire sites, SSIDs, or VLANs and connects the result with technical evidence.
Scope matters
Small local deviations can create major operational problems.
Successful, but too slow
A lease is issued, but far too late. DHCP relay, VLAN, packet loss, switch-port, or link issues become visible as potential infrastructure context.
Authentication works, accounting fails
Control validates the server, role, port, authentication, accounting, RTT, DNS resolution, and the exact error returned.
Online does not mean correctly onboarded
An AP can be reachable yet still belong to the wrong NAC group context, remain unonboarded, or receive an unexpected VLAN attribute.
Firewall and SSL inspection
Internet connectivity works, but certificate manipulation or firewall rules prevent cloud communication and the onboarding of new access points.
Service matrix
One test run. Multiple access points. Comparable results.
The Service Matrix shows queue state, current phase, runtime, and result for each access point. Site-level differences become visible without investigating every AP individually.
Infrastructure correlation
The visible fault is not always the root cause.
A damaged cable can simultaneously cause CRC errors, drops, slow DHCP leases, cloud interruptions, and unstable application sessions. Control correlates service results with AP, switch-port, and link evidence so teams do not troubleshoot the wrong system.
Packet evidence
When status values are not enough, the packet matters.
Remote Sniffer and RPCAP enable targeted captures with client, DNS, DHCP, or RADIUS filters. Scope, BPF preview, frame limit, runtime, safe stop, and PCAP download remain controlled and traceable.
Result
Turn “it does not work” into a defensible finding.
Every check returns scope, executed steps, runtime, status, technical evidence, affected infrastructure, and a precise error message. The result can flow directly into a report or downstream API processing.