Patent ID: 8806605

Claim:
A method comprising: determining, by one or more devices, one or more rules for provisioning access to a resource; communicating, by the one or more devices, the one or more rules to a firewall, the firewall receiving a data unit from a device and determining, based on the one or more rules, not to forward the data unit to a destination address associated with the resource; receiving, at the one or more devices and from the firewall, a redirection of the device, the firewall redirecting the device to the one or more devices based on determining not to forward the data unit to the destination address; receiving, at the one or more devices and from the firewall, an indication that the firewall did not forward the data unit to the destination address; determining, by the one or more devices and based on accessing a memory containing information associated with the device, that the firewall should forward the data unit to the destination address; determining, by the one or more devices and based on determining that the firewall should forward the data unit, a new rule to allow the firewall to forward the data unit to the destination address; communicating, by the one or more devices, the new rule to the firewall; receiving, at the one or more devices, confirmation from the firewall that the firewall received the new rule; determining, by the one or more devices and based on receiving the confirmation, whether the firewall has provisioned access to the resource for the device; and redirecting, by the one or more devices and when the firewall has provisioned access to the resource for the device, the device to the destination address via the firewall.