Patent ID: 9253193
Filing Date: 2016-02-02
CPC Classification: H04L

Claim Text:
1. A method comprising: (a) receiving, by a device intermediary to a client and a server, a first request from the client to access a protected resource of the server; (b) determining, by the device, that a predetermined portion of the first request matches a corresponding portion specified by a policy, the policy applied responsive to the first request to access the protected resource and specifying an action for the device to request an authentication certificate from the client responsive to the determination that the predetermined portion of the first request matches the corresponding portion specified by the policy, wherein the predetermined portion of the first request includes at least one of a uniform resource locator (URL) pattern, an identifier of one of a method or function, a directory identifier, a client network identifier, a server network identifier, a network port, and a secure socket layer (SSL) parameter; and (c) transmitting, by the device responsive to the action specified by the policy and while queuing the first request, a second request to the client for the authentication certificate.