1. A method, comprising: exchanging a session descriptor between a host and a network gateway, wherein the session descriptor is associated with a network connection and an application on the host; correlating the session descriptor with a network policy; and applying the network policy to the network connection.