Patent ID: 7734647
Filing Date: 2010-06-08
Classification: H04L

Abstract:
1. A method comprising: configuring a user database of a virtual private network gateway server that provides rules for wireless access over a secure tunnel connection to a corporate network so as to provide user specific rules for the access over the secure tunnel connection, the configuring including associating different specific users with respective sets of allowed transmission control protocol server ports, wherein the allowed transmission control protocol server ports associated with a specific user are allowed client side transmission control protocol server ports, and the configuring further includes configuring the user database to associate an allowed client side transmission control protocol server port with a server side transmission control protocol server port; authenticating a user connecting to the secure tunnel connection; and limiting the authenticated user's access to the corporate network by forwarding only user data received in the secure tunnel that as a destination has a port that is included in the set of allowed transmission control protocol server ports associated with the user in the user database such that user data received in the secure tunnel is forwarded to a server side transmission control protocol server port associated with an allowed client side transmission control protocol server port over a separate transmission control protocol connection, in which connection of the gateway server acts as a client, and further such that when receiving at the gateway server at least one application request over said secure tunnel for connection to an allowed client side transmission control protocol server port, said gateway server acts as a client to establish a new separate transmission control protocol connection for each of said application requests.