Abstract: Techniques for selective desktop control of virtual private networks (VPN's) in a multiuser environment are provided. A multiuser desktop/workstation includes a first user that establishes a VPN session on the desktop for accessing protected resources. Other users are permitted to simultaneously access non-protected resources of the desktop during the VPN session. Other users are also permitted to log into the desktop during the VPN session. However, if the other users attempt to access the protected resources, the access attempts are denied.

Abstract: Techniques for uninterrupted virtual private network (VPN) connection service with dynamic policy enforcement are provided. An existing VPN session between a VPN client and a VPN server detects a change in a VPN network being used for the existing VPN session. New credentials and new policies are received by the VPN client. The new credentials are automatically used to re-authenticate the VPN client to the change during the existing VPN session, and the new policies are dynamically used to enforce the new policies during the existing VPN session on the VPN client.

Abstract: Techniques for authenticating network connections are provided. A client makes a request to connect to a server via a client service. The server delays the request to acquire a signature for the client service from the requesting client's environment. The signature is compared against a known and previously verified signature. When the two signatures match, the server permits the connection between the client and the service via the client service. When the two signatures do not match, the server denies the connection between the client and the server and does not permit the client service to process a request to make that connection.

Abstract: Techniques for uninterrupted virtual private network (VPN) connection service with dynamic policy enforcement are provided. An existing VPN session between a VPN client and a VPN server detects a change in a VPN network being used for the existing VPN session. New credentials and new policies are received by the VPN client. The new credentials are automatically used to re-authenticate the VPN client to the change during the existing VPN session, and the new policies are dynamically used to enforce the new policies during the existing VPN session on the VPN client.

Abstract: Techniques for uninterrupted virtual private network (VPN) connection service with dynamic policy enforcement are provided. An existing VPN session between a VPN client and a VPN server detects a change in a VPN network being used for the existing VPN session. New credentials and new policies are received by the VPN client. The new credentials are automatically used to re-authenticate the VPN client to the change during the existing VPN session, and the new policies are dynamically used to enforce the new policies during the existing VPN session on the VPN client.

Abstract: Apparatus, systems, and methods may operate to establish a virtual private network (VPN) connection between a server in a private network and a client in a public network. Additional activities include intercepting a socket call from the client requesting resolution of a network address associated with a domain name in the private network, searching a local linked list for the network address, returning the network address to the client if the network address is found in the local linked list, and, if the network address is not found in the local linked list, sending a request to resolve the network address to a domain name system (DNS) server in the private network. Additional apparatus, systems, and methods are disclosed.

Abstract: Techniques for uninterrupted virtual private network (VPN) connection service with dynamic policy enforcement are provided. An existing VPN session between a VPN client and a VPN server detects a change in a VPN network being used for the existing VPN session. New credentials and new policies are received by the VPN client. The new credentials are automatically used to re-authenticate the VPN client to the change during the existing VPN session, and the new policies are dynamically used to enforce the new policies during the existing VPN session on the VPN client.

Abstract: Apparatus, systems, and methods may operate to calculate the cryptographic throughput for a gateway server, calculate the input-output throughput for the gateway server, and responsive to determining that the cryptographic throughput is less than the input-output throughput, add nodes to the gateway server cryptographic buffer queue when a projection indicates that the sum of data remaining in the cryptographic buffer queue and data available to enter the cryptographic buffer queue is greater than a preselected watermark value. Additional apparatus, systems, and methods are disclosed.

Abstract: Techniques for selective desktop control of virtual private networks (VPN's) in a multiuser environment are provided. A multiuser desktop/workstation includes a first user that establishes a VPN session on the desktop for accessing protected resources. Other users are permitted to simultaneously access non-protected resources of the desktop during the VPN session. Other users are also permitted to log into the desktop during the VPN session. However, if the other users attempt to access the protected resources, the access attempts are denied.

Abstract: Techniques for authenticating network connections are provided. A client makes a request to connect to a server via a client service. The server delays the request to acquire a signature for the client service from the requesting client's environment. The signature is compared against a known and previously verified signature. When the two signatures match, the server permits the connection between the client and the service via the client service. When the two signatures do not match, the server denies the connection between the client and the server and does not permit the client service to process a request to make that connection.

Abstract: Apparatus, systems, and methods may operate to establish a virtual private network (VPN) connection between a server in a private network and a client in a public network. Additional activities include intercepting a socket call from the client requesting resolution of a network address associated with a domain name in the private network, searching a local linked list for the network address, returning the network address to the client if the network address is found in the local linked list, and, if the network address is not found in the local linked list, sending a request to resolve the network address to a domain name system (DNS) server in the private network. Additional apparatus, systems, and methods are disclosed.