Network monitoring system with remote access

An apparatus that permits secure remote monitoring of a computer network by a user on a mobile device not connected directly to the network comprising:

• a) a secure computer network further comprising a plurality of computing resources and a security perimeter that prevents access to the network by unauthorized devices outside the perimeter, wherein all of the computing resources contained within the plurality are contained within the security perimeter;
• b) a secure computer network monitor for obtaining performance data from the plurality of computing resources, wherein the network monitor is located within the security perimeter and is connected to the plurality of computing resources;
• c) an intelligence engine connected to the secure computer network monitor, also located within the security perimeter, wherein the intelligence engine analyzes the performance data and produces one or more reports concerning an operating status of the plurality of computing resources;
• d) a security broker device located outside the security perimeter, wherein:
• i) the security broker device is accessible both to the intelligence engine and to an unsecured wireless device, further comprising a transmitter and receiver;
• ii) the wireless device is located outside the security perimeter;
• and
• iii) the security broker device insures that only authorized users have access to the intelligence engine;
• e) a specific application program module on the mobile device customized to a secure identity, wherein the module accesses the intelligence engine using the secure identity assigned to the mobile device while located within said security perimeter wherein;
• i) the user invokes the application program module on the mobile device initially to access the intelligence engine while the mobile device is within the security perimeter;
• and
• ii) after the user is granted initial access to the intelligence engine, the user accesses the security broker device via the wireless network;
• iii) after the user is granted initial access to the intelligence engine, the user is granted subsequent access to the intelligence engine via the security broker device using the secure identity originally assigned to the mobile device within the security perimeter even when the mobile device is no longer located within the security perimeter;
• and
• iv) the application program module permits the user to request and receive the one or more reports concerning an operating status of the plurality of computing resources via secure encrypted communication using the unsecured wireless device.