Network access controller operation

A system comprising:

• at least one processor;
• and
• at least one memory containing instructions configured to instruct the at least one processor to:
• receive, by an access controller and from a networking device, a request for network access,
• wherein the request indicates a context associated with the networking device, the network access, or a combination thereof;
• creating a first networking tunnel with a first gateway to provide a dedicated network route between the networking device and a first network segment accessed via the first gateway;
• receive, by an access controller, access rules for a first networking device,
• wherein the access rules identify a source and destination of packets from the first networking device and a first application of the first networking device;
• and
• wherein the access rules are determined for the networking device based on the context;
• and
• wherein the access rules comprise firewall rules for the first gateway;
• sending, by the access controller, the access rules to the first gateway, wherein the first gateway uses the access rules to apply the firewall rules;
• looking up a routing table based on the source of packets from the first networking device;
• selecting, using the routing table, a virtual network device for the first networking device,
• wherein the virtual network device has an existing networking tunnel dedicated to the destination of packets from the first networking device, and the existing networking tunnel corresponds to the first application.

At least one non-transitory computer readable storage medium comprising computer-executable instructions, which when executed cause a computing device to:

• receive, by an access controller and from a networking device, a request for network access, wherein the request indicates a context associated with the networking device, the network access, or a combination thereof;
• receive access rules for a networking device,
• wherein the access rules comprise an identification of a source and destination of packets from the networking device, and an identification of a first application of the networking device;
• wherein the access rules are determined for the networking device based on the context;
• wherein the access rules comprise firewall rules for the first gateway;
• sending, by the access controller, the access rules to the first gateway, wherein the first gateway uses the access rules to apply the firewall rules;
• look up a routing table based on the source of packets from the networking device;
• select, using the routing table, a virtual network device for the networking device, wherein the virtual network device has an existing networking tunnel dedicated to the destination of packets from the networking device and the existing networking tunnel corresponds to the first application.