Patent ID: 8117325
Filing Date: 2012-02-14
Classification: H04L

Abstract:
1. A method comprising: establishing, by a client device, a secure sockets layer virtual private network (SSL VPN) connection to a device; generating, by the client device, a hypertext transfer protocol (HTTP) request to connect to the device through the SSL VPN connection, where the HTTP request is associated with a multiple-domain-to-one domain mapping, and where the HTTP request includes a reference to a default host domain and a Uniform Resource Identifier (URI) related to the device for the SSL VPN connection; capturing, by the client device and before transmission of the HTTP request, the HTTP request; identifying, by the client device, the reference to the default host domain; determining, by the client device, a host domain related to the URI; rewriting, by the client device, the host domain, in the captured HTTP request, to form a rewritten HTTP request, where rewriting the captured HTTP request includes replacing, in captured HTTP request, the reference to the default host domain with a reference to the determined host domain related to the URI; and transmitting, by the client device, the rewritten HTTP request to the device, where the transmitted HTTP request is also received by a gateway device, and where the gateway device: determines that the received HTTP request includes a cross-domain request based on the rewritten host domain and a reference domain, and enforces cross-domain access control policies in response to determining that the received HTTP request includes the cross-domain request.