Patent ID: 8230071

Claim:
A computer-implemented method of using a services platform to provide a network service to a remote enterprise network, comprising: using a computer to perform steps comprising: providing a control module to an endpoint of the remote enterprise network; establishing an Internet Protocol (IP) tunnel between the services platform and the endpoint responsive to execution of the control module on the endpoint; establishing a bridge between the IP tunnel and the enterprise network responsive to the execution of the control module on the endpoint; allocating a unique private IP address space to the enterprise network; inventorying the enterprise network to identify a plurality of endpoints on the enterprise network, ones of the plurality of endpoints identified with enterprise network IP addresses in an enterprise address space; assigning services platform IP addresses within the unique private IP address space to identified ones of the plurality of endpoints; translating IP addresses in network traffic received by the services platform from the enterprise network via the IP tunnel from enterprise network IP addresses to corresponding services platform IP addresses; translating IP addresses in network traffic destined from the services platform to the enterprise network via the IP tunnel from services platform IP addresses to corresponding IP enterprise network addresses; and providing the network service to the enterprise network via the IP tunnel and bridge.