A process for providing an indication of a policy to remote client terminals, the process comprising: a host for controlling resources and making resources available to the remote client terminals via a wide-area network, the host receiving from one of said remote client terminals a request for a resource controlled by the host, the resource made available by the host to said remote client terminals via the wide-area network, the host connected to said remote client terminals via the wide-area network; the host providing a reference to a policy discovery script as part of a response to said remote client terminal, the policy discovery script being hosted at a policy service domain and accessible via the wide-area network, the policy service domain accessible to the remote client terminals via the wide-area network; the policy service domain receiving from said remote client terminal a request for the policy discovery script; the policy service domain providing the policy discovery script to said remote client terminal in response to the request for the policy discovery script, the request using the reference to the policy discovery script; the policy discovery script being executed, via the wide-area network, by said remote client terminal to control said remote client terminal to make a test resource request to the policy service domain and the policy service domain executing a policy decision for the test resource request in accordance with any policy stored in a policy database comprised in said policy service domain, which is enforceable against requests for resources by said remote client terminal; if the test resource request is blocked by the policy service, the policy service domain transmitting an indication of a deny decision made by the policy service to said remote client terminal; and in the case of the deny decision, the policy discovery script at said remote client terminal receives and processes the indication of the deny decision and outputs an indication of the policy stored in said policy database, for and enforceable against requests for resources by said remote client terminal at the remote client terminal. a host for controlling resources and making resources available to the remote client terminals via a wide-area network, the host receiving from one of said remote client terminals a request for a resource controlled by the host, the resource made available by the host to said remote client terminals via the wide-area network, the host connected to said remote client terminals via the wide-area network; the host providing a reference to a policy discovery script as part of a response to said remote client terminal, the policy discovery script being hosted at a policy service domain and accessible via the wide-area network, the policy service domain accessible to the remote client terminals via the wide-area network; the policy service domain receiving from said remote client terminal a request for the policy discovery script; the policy service domain providing the policy discovery script to said remote client terminal in response to the request for the policy discovery script, the request using the reference to the policy discovery script; the policy discovery script being executed, via the wide-area network, by said remote client terminal to control said remote client terminal to make a test resource request to the policy service domain and the policy service domain executing a policy decision for the test resource request in accordance with any policy stored in a policy database comprised in said policy service domain, which is enforceable against requests for resources by said remote client terminal; if the test resource request is blocked by the policy service, the policy service domain transmitting an indication of a deny decision made by the policy service to said remote client terminal; and in the case of the deny decision, the policy discovery script at said remote client terminal receives and processes the indication of the deny decision and outputs an indication of the policy stored in said policy database, for and enforceable against requests for resources by said remote client terminal at the remote client terminal.