Policy based application management

A mobile device comprising a processor configured to execute, based on instructions stored in a memory, a client agent application configured to enforce one or more policy files of a mobile device management system, wherein each policy file defines one or more access controls enforced by the mobile device management system when one or more applications are executing locally on the mobile device, and wherein the client agent application is further configured to wirelessly communicate with one or more applications executing on a remote computing device and presented on a display of the mobile device

• wherein the client agent application is further configured to facilitate one or more remote applications executing on the remote computing device and presented on the mobile device using an application specific virtual private network (VPN), wherein the application specific VPN permits access based on one or more attributes associated with each application, user or device mobile information, as defined in the one or more policy files.

One or more non-transitory computer readable media storing computer executable instructions that, when executed, cause a system to manage applications on a mobile device by:

• executing, on the mobile device, a client agent application configured to enforce one or more policy files of a mobile device management system, wherein each policy file defines one or more access controls enforced by the mobile device management system when one or more applications are executing locally on the mobile device, and wherein the client agent application is further configured to wirelessly communicate with one or more applications executing on a remote computing device and presented on a display of the mobile device,
• wherein the client agent application is further configured to facilitate one or more remote applications executing on the remote computing device and presented on the mobile device using an application specific virtual private network (VPN), wherein the application specific VPN permits access based on one or more attributes associated with each application, user and/or device mobile information, as defined in the one or more policy files.