Method and apparatus for a client connection manager

1. An apparatus for establishing a virtual connection from a server through a firewall to a client, the apparatus comprising:

the client having a first communications port, and a second communications port, the second communications port coupled to the firewall;

a client agent having a first communications port, and a second communications port, the first communications port coupled to communicate with the client first communications port;

a connection manager having a plurality of communications ports, a first one of the plurality of connection manager communications ports coupled to communicate with the client agent's second communications port, and a second one of the plurality of connection manager communications ports directly coupled to the firewall to communicate directly from the firewall with the client second communications port;

the server having a communications port, the server communications port coupled to communicate with a third one of the plurality of connection manager communications ports; and

wherein the connection manager further comprises a connection table, the connection table having a plurality of entries for each of the connection manager plurality of communications ports, and wherein at least one of the entries is a timestamp representing an earliest time at which an associated connection can be transitioned to a next lower state of activity, the lower state of activity being in sequential order standby, idle, and error.

2. The apparatus of claim 1 wherein the connection manager is part of the server.

3. The apparatus of claim 1 wherein the connection manager is a stand-alone appliance.

4. The apparatus of claim 1 wherein the client agent is located on a same side of the firewall as the client.

5. The apparatus of claim 1 wherein the connection manager has three or more communication states of activity for the plurality of communication ports.