A customer must use deep-packet inspection on the Cisco Catalyst 9800 Series Wireless Controller. The details must include all wireless client use details. Where must AVC be configured to meet this re

The AP join tag maps an AP to a site tag, policy tag, and RF tag - it contains no AVC or application inspection configuration.

The policy profile governs client session parameters such as VLAN assignment, QoS, and security policy but is not where AVC deep-packet inspection is enabled for client visibility.

The RF tag controls radio resource management and band-specific radio settings and has no role in application traffic inspection or AVC policy.

AVC is enabled directly on the WLAN configuration on the Catalyst 9800 WLC to activate deep-packet inspection for all clients associated with that SSID. Configuring AVC at the WLAN level ensures the inspection engine processes traffic for every client on that WLAN and collects detailed per-client application visibility data, which is the data source used to meet the customer's reporting requirement.