Abstract: Embodiments of a secure network gateway system and a filtering method using the system are disclosed. The secure network gateway system includes a tunneling front end node capable of establishing a communication tunnel with a client access point and authenticating a user to allow the user to access to a wide area network via the communication tunnel. The system also includes a plurality of filter nodes. A plurality of filtering rules are associated with the authenticated user. The tunneling front end node is capable of determining how to handle transmissions to and from the authenticated user according to these filtering rules and passing the transmissions to the appropriate filter nodes. The filter nodes are capable of filtering transmissions according to the filtering rules and passing the filtered transmissions to the tunneling front end node for forwarding to the authenticated user via the communications tunnel.