A method for extending cloud services into a customer premise of a local network, the method comprising: providing a cloud extension agent for execution on hardware that is part of the local network, which is separated from the Internet by at least one firewall, wherein the cloud extension agent is configured to: initiate a secure connection to a remote data-center over the Internet, outbound through the at least one firewall, using a standard internet protocol, report, via the secure connection, status information comprising information about the compliance status of a plurality of mobile devices that are authorized to remotely access one or more local resources on the local network and the identity of users of the plurality of mobile devices, receive, via the secure connection, a set of instructions, based on said report step, 2. for configuration of one or more local resources on the local network, and change the configuration of the one or more local resources in response to the set of instructions via an API exposed by the one or more local resources, and providing, as part of the remote data-center, a device management database that comprises a repository of the compliance status information received from the cloud extension agent, providing to an administrator, as part of the remote data-center, a web-based portal that allows the administrator to manage, based on said compliance status information, the plurality of mobile devices; and creating, in response to configuration changes initiated via the web-based portal, the set of instructions to be sent to the cloud extension agent via the secure connection. providing a cloud extension agent for execution on hardware that is part of the local network, which is separated from the Internet by at least one firewall, wherein the cloud extension agent is configured to: initiate a secure connection to a remote data-center over the Internet, outbound through the at least one firewall, using a standard internet protocol, report, via the secure connection, status information comprising information about the compliance status of a plurality of mobile devices that are authorized to remotely access one or more local resources on the local network and the identity of users of the plurality of mobile devices, receive, via the secure connection, a set of instructions, based on said report step, 2. for configuration of one or more local resources on the local network, and change the configuration of the one or more local resources in response to the set of instructions via an API exposed by the one or more local resources, and initiate a secure connection to a remote data-center over the Internet, outbound through the at least one firewall, using a standard internet protocol, report, via the secure connection, status information comprising information about the compliance status of a plurality of mobile devices that are authorized to remotely access one or more local resources on the local network and the identity of users of the plurality of mobile devices, receive, via the secure connection, a set of instructions, based on said report step, 2. for configuration of one or more local resources on the local network, and change the configuration of the one or more local resources in response to the set of instructions via an API exposed by the one or more local resources, and providing, as part of the remote data-center, a device management database that comprises a repository of the compliance status information received from the cloud extension agent, providing to an administrator, as part of the remote data-center, a web-based portal that allows the administrator to manage, based on said compliance status information, the plurality of mobile devices; and creating, in response to configuration changes initiated via the web-based portal, the set of instructions to be sent to the cloud extension agent via the secure connection.