Abstract: The disclosure presents systems, methods and computer program products relating to access control in a secured network. An access control policy may be indicated which at least includes a first entity being allowed to access a second entity, by way of at least one protocol via a secured network. The policy may be translated by at least one gateway or server in the secured network into firewall rule(s) to control access in the secured network.

Abstract: The disclosure presents systems, methods and computer program products relating to an overlay network in a cloud environment. A management machine may manage an overlay network. Machine(s), which may be provided by cloud provider(s), may be added to or removed from the overlay network. Data relating to a machine may be gathered and configuration data may be determined, for example when the machine is being added to the overlay network. A device associated with a user authorized for the overlay network may connect to the overlay network. The overlay network may include one or more secure tunnels wherein a private IP address or public IP address may encapsulate an overlay IP address.