The devices are phones. I have disabled dual 5Ghz option.
So APs work on both of 2.4ghz and 5ghz.
The devices can connect our LAN, and they can also get IP addresses from our DHCP server.
But they have a problem with some sites, some apps. For instance, they cannot open some apps.
We use pfsense as a firewall, but it has not any rule to block these sites and apps.
Because if it had, the other devices also would have these problems.
there is no "D" flag on the output of the "show datapath session" command.