In one embodiment, a method includes receiving at a network device, a request from a mobile device to connect to a wireless local area network, inserting mobile device and network attributes into the request, transmitting the request from the network device to an authentication proxy comprising a policy filter, and receiving a response to the request and offloading mobile data to the wireless local area network if the request is allowed. The policy filter is configured to filter requests received at the authentication proxy based on the attributes and a network policy for offloading mobile data to the wireless local area network. An apparatus and logic are also disclosed herein.