20. A network security device comprising: a policy database that stores an import translation policy; and a control unit comprising: an admission module that receives network traffic from an endpoint device; a client module that requests, in response to receiving the network traffic, authorization information from an intermediate storage device in accordance with an Interface for Metadata Access Point (IF-MAP) protocol and receives the authorization information from the intermediate storage device, wherein the intermediate authorization storage device stores the authorization information in accordance with a first IF-MAP authorization data model that confirms to an IF-MAP standard; and a translation module that applies the import translation policy to translate the authorization information stored in accordance the first IF-MAP authorization data model into translated authorization information that complies with a second proprietary authorization data model, wherein the second IF-MAP authorization data model is different from the first proprietary authorization data model, wherein the admission module forwards the network traffic based on the translated authorization information.
20. A network security device comprising: a policy database that stores an import translation policy; and a control unit comprising: an admission module that receives network traffic from an endpoint device; a client module that requests, in response to receiving the network traffic, authorization information from an intermediate storage device in accordance with an Interface for Metadata Access Point (IF-MAP) protocol and receives the authorization information from the intermediate storage device, wherein the intermediate authorization storage device stores the authorization information in accordance with a first IF-MAP authorization data model that confirms to an IF-MAP standard; and a translation module that applies the import translation policy to translate the authorization information stored in accordance the first IF-MAP authorization data model into translated authorization information that complies with a second proprietary authorization data model, wherein the second IF-MAP authorization data model is different from the first proprietary authorization data model, wherein the admission module forwards the network traffic based on the translated authorization information. 25. The network security device of claim 20 , wherein the client module generates a subscribe IF-MAP message that requests a subscription to the authorization information corresponding to the endpoint device, forwards the subscribe IF-MAP message to the intermediate storage device that implements the IF-MAP data model, generates a poll IF-MAP message that requests the authorization information corresponding to the subscription requested by the subscribe IF-MAP message, and forwards the poll IF-MAP message to the intermediate storage device that implements the IF-MAP data model.