In an environment where access to a secure computing device is governed and controlled by inherently secure protocols, the problem still remains of how access to untrusted environments such as the Web is controlled. When accessing the web there are three problems that exist;
1. Ensuring that where you browse is in line with the stated (corporate, country, personal or home) policy on web browsing
2. Ensuring that what a web server delivers back is free from malicious content
3. Ensuring that all end-devices, no matter where, or how they are connected, are protected Existing solutions involve installing filtering solutions in a DMZ which generally cover only those users inside the Intranet.
The same level of filtering is rarely available for SME or home users. Where a corporate policy exists for remote user, it involves either leaving mobile users unprotected or insisting that all web access required that the user first initiates an authenticated VPN tunnel back to the corporate environment.