An Internet-based communication system includes a user computer running a web browser and web applications, a web server located in an internal enterprise network, an encrypting VPN gateway connectable to the user computer and to the web server, said gateway running an integrated web portal server, which is addressable by the web browser providing links to webpages and web applications on the web server, wherein a proxy layer module is implemented in the user computer between the web browser and web application and downloaded from the VPN gateway by the web browser, and wherein said module defines a proxy functionality, the functions of which are executed in a JS engine of the web browser and include analyzing and changing JS code of any web application which is also downloaded from the VPN gateway but originates from web servers not located in the internal enterprise network.