Policy Driven Fine Grain URL Encoding Mechanism for SSL VPN Clientless Access

摘要

The present disclosure presents methods, systems and intermediaries which determine an encoding scheme of a uniform resource location (URL) from a plurality of encoding schemes for a clientless secure socket layer virtual private network (SSL VPN) via a proxy. An intermediary may receive a response from a server comprising a URL. The response from the server may be directed to a client via a SSL VPN session and via the intermediary. The intermediary may determine, responsive to an encoding policy, one of a transparent, opaque or encrypted encoding scheme for encoding the URL. The intermediary may rewrite the URL for transmission to the client in accordance with the determined encoding scheme.

主权项

1. A method for determining an encoding scheme of a uniform resource locator (URL) from a plurality of encoding schemes, the method comprising:
(a) receiving, by a device, a communication from a server, the communication comprising a uniform resource locator (URL); (b) selecting, by the device, an encoding scheme from a plurality of encoding schemes to modify the URL, each of the plurality of encoding schemes providing a different type of obfuscation of at least a portion of the URL; (c) modifying, by the device, the URL to obfuscate at least the portion of the URL according to the selected encoding scheme; and (d) maintaining, by the device, a mapping of the URL to the modified URL.