Method and apparatus for resource locator identifier rewrite

A non-transitory machine-readable medium that provides instructions, executable by a set of one or more processors in a network security device to perform a method for rewriting resource locator identifiers, the method comprising:

• decrypting a request received from a client over a secure hypertext transfer protocol (HTTP) session;
• forwarding the decrypted request to a resource host over a non-secure HTTP session;
• receiving a response from the resource host over the non-secure HTTP session;
• and
• determining whether a content type of the response is text,
• wherein the response is sent directly to the client when the content type is not text, the response sent via the secure resource access protocol and
• wherein the response is modified when the content type is text, the modification comprising:
• identifying one or more URLs in the response that does not designate the secure resource protocol;
• modifying the URLs to designate the secure resource access protocol,
• wherein the response including the modified URLs is sent via the secure resource access protocol session to the client.

A network security device comprising:

• a set of one or more machine processors for executing instructions stored in memory to decrypt a request received from a client device over a secure hypertext transfer protocol (HTTP) session;
• a set of one or more interfaces for:
• forwarding the decrypted request to a resource host over a non-secure HTTP session;
• and
• receiving a response from the resource host over the non-secure HTTP session, and
• memory storing a resource access protocol module executable by one of the machine processors to:
• determine whether a content type of the response is text,
• wherein the response is sent directly to the client when the content type is not text, the response sent via the secure resource access protocol, and
• wherein the response is modified when the content type is text, the modification comprising:
• identifying one or more URLs in the response that does not designate the secure resource protocol;
• modifying the URLs to designate the secure resource access protocol,
• wherein the response including the modified URLs is sent via the secure resource access protocol session to the client.