Patent ID: 8528047

Claim:
A method of providing secure access via a network device, the method comprising: (a) receiving, by a processor of the device intermediary to a client and one or more servers, a request of a user to access a server, the device controlling access via a plurality of security layers, each of the plurality of security layers operating at a different layer of network communications; (b) generating, by a policy engine executing on the processor of the device, an access rule for the user for each of the plurality of security layers based on a set of access policies corresponding to the user; (c) converting, by the policy engine executing on the processor of the device, each access rule for each of the plurality of security layers to a user specific filter for a corresponding security layer; (d) installing, by the processor of the device, each user specific filter to the corresponding security layer of the device; (e) determining, by a first user specific filter of the device for a first security layer corresponding to one layer of network communication, the user is permitted to access a resource; and (f) determining, by a second user specific filter of the device for a second security layer corresponding to a second layer of network communication, the user is not permitted to access a resource.