I'm trying to understand deep packet inspection more. let's say you have a wifi client on your network and you only allow 80 and 443 out to the internet. Let's say that a wifi client has Openvpn installed on their device and it is configured to connect to 443 at the remote site. Just curious if the Aruba controller is smart enough to say, "aha, that is openvpn-type traffic even though it just looks like TCP 443 traffic" ...hope that makes sense.