Abstract: Embodiments are directed to managing access to network resources. A first mesh agent may be configured to provide a client with access to a resource via an overlay network. The first mesh agent may determine an identity and an activity associated with requests such that the identity corresponds to an entity that may be authenticated to access the overlay network and the resource. A policy container associated with the activity may be determined based on characteristics of the requests such that the policy container may include policies associated with the activity. The requests may be validated based on the policies included in the policy container such that the validated requests may be forwarded to the resource and invalidated requests may be discarded and such that persistence of the connection may be maintained during the validation.

Abstract: Embodiments are directed to managing interactions with applications. A plurality of interactions with the application that are enforced by the native security policies may be determined. A virtual policy interface may be generated to collect information associated with a plurality of other interactions with the application that may be unassociated with the native security policies. A virtual policy engine may be employed to perform further actions, including: determining activities based on the collected information associated with the plurality of other interactions; determining virtual security policies associated with the plurality of other interactions based on the activities.

Abstract: Embodiments are directed to managing access to network resources. A first mesh agent may be configured to provide a client with access to a resource via an overlay network. The first mesh agent may determine an identity and an activity associated with requests such that the identity corresponds to an entity that may be authenticated to access the overlay network and the resource. A policy container associated with the activity may be determined based on characteristics of the requests such that the policy container may include policies associated with the activity. The requests may be validated based on the policies included in the policy container such that the validated requests may be forwarded to the resource and invalidated requests may be discarded and such that persistence of the connection may be maintained during the validation.

Abstract: Embodiments are directed to managing interactions with applications. A plurality of interactions with the application that are enforced by the native security policies may be determined. A virtual policy interface may be generated to collect information associated with a plurality of other interactions with the application that may be unassociated with the native security policies. A virtual policy engine may be employed to perform further actions, including: determining activities based on the collected information associated with the plurality of other interactions'; determining virtual security policies associated with the plurality of other interactions based on the activities.