1. A method, comprising: receiving, at a mobile device, policy information that describes one or more policies for providing an application of the mobile device with access to at least one resource accessible through an access gateway; determining that the mobile device has a ticket that is valid, said ticket being configured to provide authentication in connection with creating a virtual private network (VPN) tunnel for the application to said at least one resource; analyzing policy information to determine that network access to the at least one resource is permitted; transmitting the ticket to the access gateway; and creating the VPN tunnel for the application to access said at least one resource.