A company purchased an indoor mesh deployment using the 7005 controller and the AP 115 models, where 5 APs will be deployed on a floor to provide wireless internet access for users. Users may open…

A company purchased an indoor mesh deployment using the 7005 controller and the AP 115 models, where 5 APs will be deployed on a floor to provide wireless internet access for users. Users may open VPN tunnels using software clients over the wireless network to a 3rd party VPN concentrator overseas. The company wants to limit wireless user access to TCP traffic locally and VPN traffic overseas. In addition to the base AOS, which licenses will be necessary for this deployment?