Patent ID: 7843912

Claim:
A method for intercepting a communication of a client to a destination on a virtual private network based on a network destination description of an application authorized to be accessed via the virtual private network, the method comprising the steps of: (a) receiving, by an agent of a client on a first network, a routing table comprising a network destination description of an application authorized for access as a destination on a second network via a virtual private network; (b) intercepting, by the agent, a network communication of the client, the agent establishing a virtual private network connection via an appliance from the first network to the second network; (c) determining, by the agent, that the network communication identifies a destination with a network identifier and a port that matches the network destination description of the application authorized for access as a destination on the second network via the virtual private network; and (d) transmitting, by the agent in response to the identification of the authorized application, the network communication via the virtual private network connection.