Patent ID: 8560709

Claim:
A hardware apparatus for managing access to a resource over a network, comprising: a receiver that receives a request for access to the resource from a client device; and a policy manager, coupled to the receiver, that performs actions, including: downloading a component onto the client device, wherein the downloaded component inspects the client device to detect a configuration of the client device, including determining whether client-security software other than a virtual sandbox is active on the client device; receiving from the downloaded component the configuration of the client device based on the inspection; in response to the received request, applying, using the apparatus, a dynamic policy for the access based, in part, on the received configuration and the requested resource; employing the virtual sandbox at the client device to encrypt the resources using an encryption key that is separately stored on a remote server device; and applying, using the apparatus, a restriction to the client device for access by the client device to the requested resource, the restriction based on the applied dynamic policy.