1. A method of controlling by an appliance an action performed by a client on a resource accessed via a virtual private network connection provided by the appliance to a network, the method comprising the steps of: (a) receiving, by an appliance, a request from a client to access a resource on a network via a secure socket layer virtual private network (SSL VPN) connection provided by the appliance to the network; (b) receiving, by the appliance, information about the client from a collection agent; (c) identifying, by a policy engine of the appliance, a level of access to the resource from a plurality of levels of access responsive to applying one or more policies to the received information; and (d) controlling, by the appliance, an action performed on the resource by the client via the SSL VPN connection based on the identified level of access.