Network traffic control based on application path

A network device, comprising:

• one or more memories;
• and
• one or more processors communicatively coupled to the one or more memories, configured to:
• receive network traffic associated with an application protocol,
• wherein the network traffic is associated with a session involving a network;
• identify an application path from the network traffic,
• wherein the application path identifies a communication protocol for the session and the application protocol;
• obtain, from a policy mapping, policy information associated with the application path,
• wherein the policy mapping includes policies for communication protocols that can be used for sessions associated with a plurality of application protocols;
• determine, based on the policy information, whether communication of network traffic associated with the session is allowable via the network;
• and
• perform, based on whether communication of the network traffic is allowable via the network, an action associated with the network traffic.

A non-transitory computer-readable medium storing instructions, the instructions comprising:

• one or more instructions that, when executed by one or more processors, cause the one or more processors to:
• receive network traffic associated with a session,
• wherein the session is associated with a network;
• determine, from the network traffic, an application path that is associated with the session,
• wherein the application path is associated with a communication protocol and an application protocol;
• determine, based on policy information that is associated with the application path, whether the network traffic associated with the session is capable of being communicated via the network using the communication protocol and the application protocol;
• and
• perform, based on whether the network traffic is determined to be capable of being communicated, an action associated with communication of the network traffic.