A network has one master controller and two local controllers. The local controllers are located in remote branch offices with a WAN link to the HQ site. The master controller is located at the HQ site. There are
802.1X employee and captive portal guest SSIDs supported on APs in both the branch offices and HQ site.
What must be allowed through a firewall located at the HQ site to ensure master and local controller communication?