Application of group-based policies to network traffic from clients

The disclosure relates to applying group-based policies to network traffic from clients. Some examples relate to a proxy service on a network device for applying group-based policies (GBPs) to network traffic from clients. In one example, a proxy service on a network device is used to intercept a network access request message regarding a client, the network access request message from an access device. The proxy service forwards the network access request message to an authentication server. The server responds by sending a network access response message to the access device. The proxy service intercepts a network access response message from the authentication server and obtains role information of the client from the network access response message. In response to receiving network traffic from the client, the proxy service identifies a GBP corresponding to role information of the client and applies the GBP to the network traffic from the client. 本公开涉及将基于群组的策略应用于来自客户端的网络流量。一些示例涉及网络设备上的代理服务，该代理服务用于将基于群组的策略