Patent ID: 7334126

Claim:
A method of providing access to a server in an arrangement that includes at least one device that serves as a firewall having a protected side and an unprotected side, a first proxy adapted to allow clients on the unprotected side of the firewall to gain direct access thereto, and a second proxy adapted to allow said server, on the protected side of the firewall, to gain direct access thereto and to not allow said clients direct access thereto comprising the steps of: receiving at the first proxy a connection request from a client of said clients; sending said connection request to the second proxy through said firewall, over a control channel previously established by a second proxy and controlled by the second proxy; authenticating the client; when the client is authenticated, said second proxy establishing a data connection with said first proxy, through said firewall, with the data connection adapted to forward requests of said client to said second proxy, where the data connection is distinct from the control channel.