(1) a policy manager, coupled to a network, including a database for storing a security policy including a plurality of rules that control user access to applications; and a policy distributor, coupled to the database, for distributing the plurality of rules through the network, wherein the policy manager comprises a processor;