Method for implementing cloud-based security protocols for a user device

A computer system, comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
• receiving, at a cloud-based service, group policy objects (GPOs) that indicate a plurality of security services for network flows based on one or more parameters associated with the network flows;
• receiving, at the cloud-based service, a data packet of a network flow sent from a user device;
• identifying metadata in the data packet that indicates the parameters associated with the network flow;
• and
• determining, that the parameters in the metadata of the packet correspond to a particular GPO that indicates security services of the plurality of security services that are to be applied to the network flow;
• and
• sending the network flow to the one or more security services.

A method performed by a controller on a user device, the method comprising:

• receiving, at a cloud-based service, group policy objects (GPOs) that indicate a plurality of security services for network flows based on one or more parameters associated with the network flows;
• receiving, at the cloud-based service, a data packet of a network flow sent from a user device;
• identifying metadata in the data packet that indicates the parameters associated with the network flow;
• and
• determining, that the parameters in the metadata of the packet correspond to a particular GPO that indicates security services of the plurality of security services that are to be applied to the network flow;
• and
• sending the network flow to the one or more security services.