1. At least one non-transitory computer readable medium having logic encoded therein, wherein the logic, when executed by one or more processors, is operable to perform operations comprising: receiving, at a network gateway, a session descriptor from a host, wherein the session descriptor identifies an application file associated with a process on the host attempting to establish a network connection via the network gateway; determining a network policy to be applied to network traffic associated with the host based on information contained in the session descriptor; correlating network traffic received by the network gateway with the host based on a universally unique identifier (UUID) contained in the session descriptor; and applying the network policy to the network traffic.