Patent ID: 8566925
Filing Date: 2013-10-22
Classification: H04L

Abstract:
1. A method for an appliance to authenticate access of a client to a protected resource on a server via the appliance, the method comprising the steps of: (a) receiving, by an appliance, a client request to access a protected directory of a server, the appliance providing access to the server via a transport layer connection; (b) determining, by the appliance, that the protected directory matches a predetermined directory specified in a client authentication policy of the appliance, the client authentication policy applied on a per-directory and per-request basis and identifying an action for the appliance to request a client authentication certificate from the client responsive to matching the predetermined directory; (c) queuing, by the appliance in response to matching the predetermined directory, the client request to prevent access to the protected resource at the server via the transport layer connection until an authentication certificate of the client is validated in accordance with the client authentication policy; and (d) transmitting, by the appliance in response to the action identified by the client authentication policy, a request to the client for the authentication certificate.