when looking at the report Wireless AP Availability
have a look at the uptime displayed for the AP
if there is a uptime displayed, the tunnel from AP to controller should be up
try to set a lower mtu in ap static configuration e.g. 1300
the wassp tunnel from ap to controller has DF bit set, which makes problems in WAN/VPN environments