There is presented a method and apparatus for controlling secure communications in a communications network. An intermediate network element (INE) receives a request from a client to establish a secure connection between the client and a first server. The received request is analysed to determine a client identifier. The INE determines, based on the client identifier whether to attempt to establish a secure connection between the client and the INE. Responsive to a determination not to attempt to establish a connection, the received request is forwarded on to a second server. Responsive to a determination to attempt to establish a connection, a message comprising information for the client to use in establishing a secure connection with the INE is sent to the client.