Patent ID: 9160718
Filing Date: 2015-10-13
Classification: H04L

Abstract:
1. A method performed by data processing apparatus, the method comprising: receiving, at a network gateway from a client device within a network, a first request to access a first resource hosted by a server outside the network, the first request including a first universal resource identifier that identifies the first resource; determining, based on one or more policies in a policy group associated with the client device, whether requests from the client device to access the first resource outside the network should be redirected to a man-in-the-middle gateway within the network; providing, based on determining that requests from the client device to access the first resource outside the network are to be redirected to the man-in-the-middle gateway within the network, a redirect response to the client device, the redirect response including a second universal resource identifier, the second universal resource identifier comprising a domain associated with the man-in-the-middle gateway and further comprising at least a portion of the first universal resource identifier, such that the client device displays at least the domain associated with the man-in-the-middle gateway to a user of the device in response to receiving, from the user, input to navigate to the first universal resource identifier; receiving, from the client device, a second request to access the first resource, the second request including the second universal resource identifier; establishing, based on receiving the second request, a first encrypted connection between the client device and the man-in-the-middle gateway, and a second encrypted connection between the man-in-the-middle gateway and the server hosting the first resource, to facilitate encrypted communication traffic between the client device and the server hosting the first resource; and decrypting and inspecting the encrypted communication traffic passing between the client device and the server hosting the first resource.