Patent ID: 8856909

Claim:
A method performed by a first device, the method comprising: receiving, by the first device, a request from an endpoint to access, via a network associated with the first device, a resource protected by a second device that differs from the first device; authenticating, by the first device and based on the request, the endpoint to obtain first authentication information, the first authentication information enabling the endpoint to access the network; forwarding, by the first device, the first authentication information to the endpoint; determining, by the first device and based on the request, that the endpoint is unauthorized, by the second device, to access the resource; forwarding, by the first device based on determining that the endpoint is unauthorized to access the resource, the first authentication information to a network admission control (NAC) device associated with the network, the NAC device being different from the first device and the second device, the NAC device generating second authentication information based on the first authentication information, and the second authentication information enabling the endpoint to access the resource through the second device; requesting, by the first device and from the NAC device, the second authentication information; receiving, by the first device and from the NAC device, the second authentication information; and transmitting, by the first device, the second authentication information to the endpoint.