Patent ID: 8667146

Claim:
A method for rewriting by an intermediary content transmitted via a clientless secure socket layer virtual private network (SSL VPN) session between a client and a server, the method comprising: a) identifying, by an intermediary, an access profile for a request from a client to access content from a server if a clientless SSL VPN session is established between the client and the server, the access profile identified from a plurality of access profiles based on a rule applied on content of the request, the access profile comprising (i) a first rewrite policy for rewriting uniform resource locators (URLs) based on a type of the content transmitted by the server via the clientless SSL VPN session, the transmitted content comprising one or more types of content from a plurality of types of content accessible from the server, and (ii) one or more regular expressions to detect one or more URLs in the type of content served by the server via the clientless SSL VPN session, the intermediary bypassing the access profile for rewriting the URLs if a client based SSL VPN session is established between the client and the server; b) detecting, by the intermediary responsive to the one or more regular expressions of the identified access profile, one or more URLs in content served by the server in response to the request if the clientless SSL VPN session is established; and c) rewriting, by the intermediary responsive to the detection, the one or more detected URLs in accordance with a URL transformation specified by the first rewrite policy if the clientless SSL VPN session is established.