Patent ID: 8185933

Claim:
A method of controlling access of a plurality of local endpoint devices to a remote network resource by an edge router local to the plurality of local endpoint devices and remote from the remote network resource, wherein the edge router routes packets to the local endpoint devices and provides network access to the local endpoint devices, wherein a remote access control server local to the remote network resource controls access to the remote network resource, and wherein the edge router controls access to the remote network resource on behalf of the remote access control server, the method comprising: locally caching, by the edge router, a set of endpoint security information maintained by the remote access control server, wherein the locally cached set of endpoint security information specifies one or more policies to control access to the remote network resource by the plurality of local endpoint devices; and controlling, by the edge router on behalf of the remote access control server, access to the remote network resource by a first one of the endpoint devices based on the locally cached endpoint security information, an identity of a user of the first one of the endpoint devices, and a security state of the first one of the endpoint devices.