Patent ID: 8301786

Claim:
A computer-readable storage medium storing computer-executable instructions that when executed by a computer cause the computer to perform an operation to restrict endpoint-specific application sessions, the operation comprising: retrieving a network policy defining a threshold value related to a characteristic of network performance and an associated action, where the network policy is based on at least one of an application type and an endpoint destination; receiving, in a network device, a packet transmitted as part of a data stream, where the data stream comprises a sequence of packets; identifying a session associated with the data stream, an application associated with the session, and an endpoint destination of the data stream; storing a set of data associated with the data stream, where the set of data is based on the identified session, the identified application, and the identified endpoint destination; determining, whether the stored data exceeds the threshold value; and upon determining that the stored data exceeds the threshold value, restricting the application session of the endpoint destination by controlling the network device to perform the action.