Techniques for providing comply-to-connect for secure network access

A system for performing persistent comply to connect (C2C) for establishing a connection to a network, the system comprising:

• an endpoint device including a hardware processor and a memory storing a secure endpoint (SE) agent;
• an SE server;
• and
• a secure access (SA) server;
• and
• wherein the system is configured to:
• receiving, at the SA server from an endpoint device, a request to access a first network;
• continuously collecting, via the SE agent, data from the endpoint device requesting to access the first network;
• determining, via the SE server, compliance requirements of the first network;
• calculating, via the SE server, compliance status of the endpoint device in view of the determined compliance requirements of the first network;
• exposing, via the SE server, a limited device compliance application programming interface (API) for securely sharing the calculated compliance status of the endpoint device with an SA server;
• performing, via the SA server, integration with the SE agent via the limited device compliance API for processing query from the SA server, and receiving real-time compliance data of the endpoint device;
• automatically enforcing, via the SA server, one or more policy actions based on the real-time compliance data of the endpoint device to force the endpoint device into compliance when the real-time compliance data of the endpoint device indicates non-compliance with at least one of the compliance requirements of the first network;
• and
• continuously monitoring, after the endpoint device has been forced into compliance and granted access to the first network, the compliance status of the endpoint device for a change in the compliance status, and automatically enforcing, by the SA server, the one or more policy actions to resolve the change in the compliance status of the endpoint device.

A non-transitory computer readable storage medium that stores a computer program for performing persistent comply to connect (C2C) for establishing a connection to a network, when executed by a processor, causing a system to perform a process comprising:

• receiving, at a secure access (SA) server from an endpoint device, a request to access a first network;
• continuously collecting, by a secure endpoint (SE) agent, data from the endpoint device requesting to access the first network;
• determining, by an SE server, compliance requirements of the first network;
• calculating, by the SE server, compliance status of the endpoint device in view of the determined compliance requirements of the first network;
• exposing, by the SE server, a limited device compliance application programming interface (API) for securely sharing the calculated compliance status of the endpoint device with an SA server;
• performing, by the SA server, integration with the SE agent via the limited device compliance API for processing query from the SA server, and receiving real-time compliance data of the endpoint device;
• automatically enforcing, by the SA server, one or more policy actions based on the real-time compliance data of the endpoint device to force the endpoint device into compliance when the real-time compliance data of the endpoint device indicates non-compliance with at least one of the compliance requirements of the first network;
• and
• continuously monitoring, after the endpoint device has been forced into compliance and granted access to the first network, the compliance status of the endpoint device for a change in the compliance status, and automatically enforcing, by the SA server, the one or more policy actions to resolve the change in the compliance status of the endpoint device.