Abstract: A method is disclosed including establishing a browser session in response to receiving a request from a browser application in a public network. The browser session is assigned to a dedicated network service running in a dedicated network name space. Requests received from the browser application are proxied to a dedicated network service. A local web session in the dedicated network service authenticates a user of the browser application for access to at least one private webservice. A security client in the dedicated network service establishes a networking tunnel between the proxy and a remote gateway to the private network, thereby obtaining network access to the private webservice from the dedicated network name space. Within the dedicated network name space, proxied requests addressing the private webservice are forwarded over the networking tunnel to the private network.

Abstract: In one approach, a computer-implemented method includes: implementing, by a gateway, a firewall including firewall rules for selectively blocking and allowing network traffic between a client device and one or more network devices in a private network; receiving, by the gateway from the client device, a first access rule; and in response to receiving the first access rule, creating a first firewall rule of the firewall rules.

Abstract: In one approach, a computer-implemented method includes: implementing, by a gateway, a firewall including firewall rules for selectively blocking and allowing network traffic between a client device and one or more network devices in a private network; receiving, by the gateway from the client device, a first access rule; and in response to receiving the first access rule, creating a first firewall rule of the firewall rules.

Abstract: A computer-implemented method, including: in response to a request from a client device, establishing a network tunnel between the client device and a gateway, the gateway implementing a firewall including firewall rules for selectively blocking and allowing network traffic between the client device and one or more network devices in a private network; in response to an update to a policy after establishing the network tunnel, receiving a first token; and in response to receiving the first token, updating at least one of the firewall rules while the network tunnel is active.

Abstract: A computer-implemented method, including: in response to a request from a client device, establishing a network tunnel between the client device and a gateway, the gateway implementing a firewall including firewall rules for selectively blocking and allowing network traffic between the client device and one or more network devices in a private network; in response to an update to a policy after establishing the network tunnel, receiving a first token; and in response to receiving the first token, updating at least one of the firewall rules while the network tunnel is active.

Abstract: A computer-implemented method, including: upon a request from a client device, establishing, by a computer system implementing a gateway to a private network, a network tunnel between the client device and the gateway; the gateway further implementing a firewall including firewall rules for selectively blocking and allowing network traffic between the client device and one or more network devices in the private network; upon a triggering of a firewall rule by a request for access to the private network by the client device and before applying the firewall rule, checking, by the computer system, if a corresponding condition is met; and if the condition is not met, then, by the computer system, sending to the client device an action to be performed by the client device.