Patent ID: 8046820

Claim:
A method for providing network security given a remote network of a plurality of devices configured to engage in network security negotiation with a local network, the method comprising: by a key authorization point (KAP) located within the local network: exchanging network security negotiating communications with each of the plurality of devices to establish a network security negotiation between each of the plurality of devices and the KAP; creating a respective security policy in response to each network security negotiation established by the KAP; and for each of the plurality of devices, deploying the respective security policy to a policy enforcement point (PEP) located within the local network and in a path between the KAP and each of the plurality of devices and to other PEPs located within the local network, so that each of the PEPs passes security negotiating communications being exchanged between the KAP and the plurality of devices, and encrypts and decrypts communications between the plurality of devices and the local network according to the deployed security policies.