System for controlling network access of terminal based on tunnel and method thereof

A server comprising:

• a communication circuit;
• a memory storing a database;
• and
• a processor operatively connected to the communication circuit and the memory, wherein the processor is configured to:
• receive a first request that requests network access of a target application stored in a terminal to a destination network from an access control application of the terminal, the first request including identification information of a control flow, identification information of the target application, and identification information of the destination network,
• identify whether the target application is accessible based on the identification information of the control flow and the database,
• identify whether an authorized tunnel exists between the target application and a gateway of the destination network based on the database, the identification information of the target application, and the identification information of the destination network, when target application is accessible, and
• transmit the identified result to the access control application using the communication circuit.

A gateway configured to:

• receive a data packet from a terminal,
• identify whether the received data packet is received through a tunnel authorized by an external server,
• forward the data packet to a destination network, when the data packet is received through the authorized tunnel,
• drop the data packet, when the data packet is not received through the authorized tunnel,
• receive information required to generate the authorized tunnel from the external server, and
• generate the authorized tunnel between the terminal and the gateway based on the information received from the external server.