Adding policy coding to packet headers to use to access resources in a secure network

A system for generating packets at a client device to access resources in a secure network, comprising:

• a processor;
• and
• a computer readable storage medium having computer readable program code embodied therein that when executed by the processor performs operations, the operations comprising:
• determining, at the client device, policy information for a user defining user privileges to access resources in the secure network;
• inserting, at the client device, the policy information into each of a plurality of packet headers in each of a plurality of packets to transmit the packets with the inserted policy information to an enforcement point associated with a destination resource in the secure network indicated in the packet headers;
• and
• transmitting, by the client device, the packets with the packet headers including the policy information to the enforcement point, wherein the enforcement point applies policy rules to the policy information to determine whether to forward the packets to the destination resource.

A computer implemented method for generating packets at a client device to access resources in a secure network, comprising:

• determining, at the client device, policy information for a user defining user privileges to access resources in the secure network;
• inserting, at the client device, the policy information into each of a plurality of packet headers in each of a plurality of packets to transmit the packets with the inserted policy information to an enforcement point associated with a destination resource in the secure network indicated in the packet headers;
• and
• transmitting, by the client device, the packets with the packet headers including the policy information to the enforcement point, wherein the enforcement point applies policy rules to the policy information to determine whether to forward the packets to the destination resource.