Patent ID: 8612541

Claim:
A method, comprising: in response to receipt of a request from a client to obtain an object stored by a server, said request being received at an intermediary device logically disposed between the client and the server, a transactor of the intermediary device opening a session for the request and referring the request to a policy administrator of the intermediary device for determining which of a plurality of tenants serviced by the intermediary device is a tenant associated with the client making the request; upon determining the tenant associated with the client making the request, the policy administrator selecting a then-current tenant-specific policy by which the request is to be processed and providing the selected tenant-specific policy to the transactor; instantiating the tenant-specific policy provided by the policy administrator as a policy ticket and thereafter the transactor and a policy evaluator cooperating to evaluate and process the request and any response thereto at one or more communication flow checkpoints according to rules reflected in the policy ticket.