1. A method, comprising: receiving metadata from a host over a metadata channel; intercepting a network flow from the host; and correlating the metadata with the network flow to apply a network policy to the network flow.