1. A computer-readable medium having stored thereon an agent component that is configured to be installed on a mobile device of a user to provide secure access over a network to enterprise resources of an enterprise system, said agent component comprising executable code that implements a process that comprises: intercepting an HTTP request generated by an application installed on the mobile device; encapsulating a representation of the HTTP request according to a tunneling protocol; and sending the encapsulated representation of the HTTP request over a network to a tunnel mediator that is configured to extract and forward the representation of the HTTP request to a corresponding enterprise resource.