Would love to hear if this is fixed.
We ran into this a few months ago.
Don´t remember all details, but what worked was a ping from the controller.
Anything outside the LAN where the AP is placed could not ping the AP.
We opened a case and were told that this is a known behaviour and related to CPSEC.
Christian