16. A system to grant network access to a client in a communication network, the system comprising: a client protocol terminator configured to be coupled through a network access device to a remote client; an access attribute translation device coupled to the client protocol terminator and configured to translate attributes from a first framework representation into a canonical representation; a policy database coupled to the access attribute translation device and configured to store protocol attributes relating to a plurality of frameworks; a service protocol terminator configured to be coupled to one or more backend service services; a service attribute translation device coupled to the policy database and the service protocol terminator, the service attribute translation device being configured to translate attributes from a second framework representation to the canonical representation; and a policy subsystem coupled to the access attribute translation device and the policy database, configured to determine a policy result based upon an attempt by the client to connect to the communication network, wherein the network access device blocks the client from accessing the communication network prior to the policy result being determined and the network access device grants the client access to the communication network based on the policy results.
17. The system of claim 16 further comprising the policy subsystem having a plurality of rules engine pipeline stages.