Client network access provision by a network traffic manager

1. A method comprising:

selecting one or more policies, wherein each policy is associated with one or more network entitlement rules defining network access rules;

retrieving the one or more network entitlement rules associated with the selected policies; and

providing the retrieved one or more network entitlement rules to allow network access for a client computing device.

2. The method of claim 1 further comprising, obtaining context parameters related to a context of the client computing device.

3. The method of claim 2 , wherein the context parameters are obtained from a network traffic manager.

4. The method of claim 3 , wherein the retrieved one or more network entitlement rules are provided to the network traffic manager after authentication of the client computing device.

5. The method of claim 3 , wherein the context parameters comprise at least a network address of the client computing device.

6. The method of claim 3 , wherein the selecting comprises performing a predefined logical combination of the context parameters.

7. The method of claim 3 , wherein the selecting comprises performing a predefined Boolean combination of the context parameters.

8. The method of claim 2 , wherein the context parameters comprise at least one of:

a device parameter indicative for a state or property of the client computing device;

a user parameter indicative for a property of a user of the client computing device; or

a system parameter indicative for a property of a framework configuration of the client computing device.

9. The method of claim 8 , wherein the context parameters comprise at least the device parameter, and wherein the device parameter comprises at least one of: a network address of the client computing device, a certificate of the client computing device, local firewall configuration information, or information related to a networking interface configuration of the client computing device.

10. The method of claim 8 , wherein the context parameters comprise at least the user parameter, and wherein the user parameter comprises at least one of: user account information for the user, information on a country in which the user is registered, or e-mail account information of the user.

11. The method of claim 8 , wherein the context parameters comprise at least the system parameter, and wherein the system parameter comprises at least one of: a time of the day, a login history of the client computing device, or a login history of the user of the client computing device.

12. The method of claim 1 , wherein the retrieved one or more network entitlement rules are generic for any client computing device, and the retrieving further comprises assigning a networking address of the client computing device to the retrieved one or more network entitlement rules.

13. The method of claim 1 , further comprising creating a predetermined set of policies, and wherein the selecting comprises selecting the selected policies from the predetermined set of policies.

14. A networking device comprising:

at least one processor; and

at least one memory storing instructions configured to instruct the at least one processor to:

select one or more policies, wherein each policy is associated with one or more network entitlement rules;

retrieve the one or more network entitlement rules associated with the selected policies; and

provide the retrieved one or more network entitlement rules to allow network access for a client computing device.

15. The networking device of claim 14 , wherein the instructions are further configured to instruct the at least one processor to obtain context parameters related to a context of the client computing device.

16. The networking device of claim 15 , wherein the retrieved one or more network entitlement rules are provided to a network traffic manager after authentication of the client computing device with the networking device.

17. A system comprising:

a networking device comprising:

at least one first processor; and

at least one memory storing first instructions configured to instruct the at least one first processor to:

select one or more policies, wherein each policy is associated with one or more network entitlement rules; and

retrieve the one or more network entitlement rules associated with the selected policies;

a gateway comprising:

at least one second processor; and

at least one memory storing second instructions configured to instruct the at least one second processor to:

establish a networking tunnel between the gateway and a client computing device; and

allow network access according to the retrieved one or more network entitlement rules.

18. The system of claim 17 , wherein:

the first instructions are further configured to instruct the at least one first processor to provide a client tunnel session list to the client computing device, wherein the client tunnel session list comprises tunnel authentication information; and

the second instructions are further configured to instruct the at least one second processor to establish the tunnel upon authentication of the client computing device using the tunnel authentication information.

19. The system of claim 17 , wherein the instructions are further configured to instruct the at least one processor to obtain context parameters related to a context of the client computing device, wherein the context parameters comprise at least a device parameter indicative for a state or property of the client computing device.

20. The system of claim 19 , wherein the context parameters further comprise a login history of the client computing device.