Enforcing compliance with a policy on a client

A computer-implemented method in a gateway node device for enforcement of client computer policy compliance on a communication network, the method comprising the steps of:

• receiving a data transmission from a client computer to a remote computer and comprising status information, the status information comprising information about at least one security program in relation to the client computer;
• responsive to a temporary policy not being active, determining whether the status information meets at least one predetermined criteria;
• and
• responsive to the status information meeting the at least one predetermined criteria, activating a temporary policy allowing subsequent data transmissions to be sent without checking status information against the at least one predetermined criteria,
• wherein the temporary policy expires when either a first period expires or the client computer has not initiated any subsequent data transmissions within a second period.

A non-transitory computer-readable medium storing computer instructions that, when executed by a processor, perform a method in a gateway node device for enforcement of client computer policy compliance on a communication network, the method comprising the steps of:

• receiving a data transmission from a client computer to a remote computer and comprising status information, the status information comprising information about at least one security program in relation to the client computer;
• responsive to a temporary policy not being active, determining whether the status information meets at least one predetermined criteria;
• and
• responsive to the status information meeting the at least one predetermined criteria, activating a temporary policy allowing subsequent data transmissions to be sent without checking status information against the at least one predetermined criteria,
• wherein the temporary policy expires when either a first period expires or the client computer has not initiated any subsequent data transmissions within a second period.

A gateway node device for enforcement of client computer policy compliance on a communication network, the gateway node device comprising:

• a processor;
• and
• a memory, the memory storing:
• a first module to receive a data transmission from a client computer to a remote computer and comprising status information, the status information comprising information about at least one security program in relation to the client computer;
• a second module to, responsive to a temporary policy not being active, determine whether the status information meets at least one predetermined criteria;
• and
• a third module to, responsive to the status information meeting the at least one predetermined criteria, activate a temporary policy allowing subsequent data transmissions to be sent without checking status information against the at least one predetermined criteria,
• wherein the temporary policy expires when either a first period expires or the client computer has not initiated any subsequent data transmissions within a second period.