Patent ID: 8869262
Filing Date: 2014-10-21
Classification: H04L

Abstract:
1. A method for an appliance to allow or deny a level of access by an application on a client to a resource via a virtual private network connection based on identification of the application, the method comprising the steps of: (a) establishing, by an appliance providing access to a second network, a virtual private network connection between a client on a first network and the appliance, the client having a routing table; (b) receiving, by the appliance from an agent of the client, via the virtual private network connection, an identifier of an application on the client responsive to a determination that the routing table includes the identifier of the application, the agent intercepting messages from the application to transmit via the virtual private network connection responsive to the determination; (c) associating, by the appliance, with the virtual private network connection an authorization policy of a plurality of policies based on the identifier of the application; (d) receiving, by an appliance from the agent, a request from the application on the client to access a resource on the second network; and (e) determining, by the appliance, from the authorization policy associated with the virtual private network connection to one of allow or deny access to the second network over the virtual private network connection by the application to the resource based on the identifier of the application.