Patent ID: 8543696

Claim:
A method, comprising: monitoring an open inbound connection from a computing device to a virtual desktop session to define open inbound connection information relating to the open inbound connection, the open inbound connection information including a connection type used for connecting the computing device to the virtual desktop session, or a connection port or network address assigned to a server providing the open inbound connection; monitoring an open outbound connection from the virtual desktop session to define open outbound connection information relating to the open outbound connection, the open outbound connection information including a Uniform Resource Locator (URL), or a connection port or network address to a resource; evaluating the open inbound connection information and the open outbound connection information based, at least in part, on an access policy to determine whether (1) the open inbound connection is from an insecure environment and (2) the open outbound connection is to a protected web page or resource accessible from a secure environment; and redirecting the open outbound connection to an unprotected web page or resource accessible from the insecure environment in accordance with the access policy, if the open inbound connection is from the insecure environment and the open outbound connection is to a protected web page or resource accessible from the secure environment.