1. A method of operating a computing device comprising at least one processor for monitoring remote access to an enterprise network, the method comprising, with the at least one processor: generating, for a first entity accessing a resource on the enterprise network through a remote client computer, a first identifier of at least one first security association between the first entity and the resource; associating, based on the first identifier, the at least one first security association with a first entity session created for the first entity, wherein each of the at least one first security association in the first entity session has the first identifier; determining, based on an identity of the remote client computer, that the first entity session belongs to a connection between the remote client computer and the enterprise network, wherein the connection comprises security associations created for resources on the enterprise network that are accessed through the remote client computer connected to the enterprise network; and providing a representation of the connection based on the determination, the representation indicating that the resource is accessed by the first entity through the remote client computer over the connection.