Patent ID: 8543726
Filing Date: 2013-09-24
Classification: H04L

Abstract:
1. A method for redirecting, by a web relay, requests of a client to a network security appliance, the method comprising: a) intercepting, by a web relay of a client, a request of the client for a resource of a server, the client in communication with a network security appliance, the network security appliance intermediary to the client and the server, the request comprising a uniform resource locator (URL) of the server; b) determining, by the web relay based on one or more rules received from the network security appliance, that the resource of the server is a protected resource that is not to be directly accessed by the client but must be accessed only via the network security appliance; c) establishing, by the web relay responsive to the determination, a secure tunnel to the network security appliance; d) rewriting, by the web relay prior to transmission from the client, the request destined to the server for transmission to the server via the network security appliance, the request rewritten to preserve a namespace of a cookie of the request by concatenating an address of the network security appliance with the uniform resource locator (URL) of the server of the request while not rewriting the cookie, the network security appliance using the URL of the server from the rewritten request for obtaining the resource; and e) communicating, by the web relay, the rewritten request and the preserved cookie to the network security appliance.