Patent ID: 8239556

Claim:
A system comprising: one or more devices, each of the one or more devices comprising a processor and memory, that: receive, from a client device and via a sockets layer virtual private network (SSL VPN) connection associated with a firewall device, a rewritten hypertext transfer protocol (HTTP) request to access, via a device associated with a uniform resource identifier (URI) and a reference domain associated with the SSL VPN connection, information associated with a host domain, the rewritten HTTP request including an identifier associated with the client device, determine, based on the reference domain and the host domain, whether the rewritten HTTP request is associated with a cross-domain request in which the reference domain and the host domain differ, allow the rewritten HTTP request when the rewritten HTTP request is not associated with the cross-domain request, the request, and determine, when the rewritten HTTP request is associated with the cross-domain request, whether to allow the rewritten HTTP request, the one or more devices, when determining whether to allow the rewritten HTTP request associated with the cross-domain request, are further to: identify, based on the identifier, an access control policy, of a plurality of access control policies, associated with the client device, determine whether the host domain complies with the identified access control policy, identify, based on the URI, a device domain associated with the device, determine whether the device domain complies with the identified access control policy, and permit, when the host domain and the device domain comply with the identified access control policy, the client device to access the information, the one or more devices including a gateway device.