System and method to apply network traffic policy to an application session

1. A method for generating a report for one or more application session records, comprising:

recognizing an application session between a network and an application via a security gateway;

determining by the security gateway a user identity from an application session record for the application session, wherein the application session record comprises the user identity used for accessing the network through a host, a host identity for the host, and an application session time, wherein a creating of the application session record comprises:

querying an identity server by sending the host identity and the application session time in the application session record, wherein the identity server comprises an access session record for an access session between a second host and the network, wherein the access session record comprises a second user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time,

wherein the identity server compares the host identity in the application session record with the second host identity in the access session record, and comparing the access session time with the application session time,

wherein the identity server returns the second user identity in the access session record, if the host identity in the application session record matches the second host identity in the access session record, and if the access session time matches the application session time; and

storing the second user identity as a network user identity used for accessing the network in the application session record;

determining one or more security policies applicable to the application session based on the user identity; and

generating a security report based on the application session record and the one or more security policies.

2. The method of claim 1 , wherein the security report comprises a security message, wherein the generating further comprises:

generating the security message when one or more of the security policies are applied to the application session.

3. The method of claim 2 , wherein the one or more security policies comprises a network traffic policy.

4. The method of claim 3 , wherein the network traffic policy comprises one or more of the following: a session connection rate; a network capacity; and a file transfer rate.

5. The method of claim 3 , wherein the security message comprises the one or more security policies applied to the application session, wherein the generating the security message further comprises:

generating the security message when a session connection rate of the network traffic policy is exceeded.

6. The method of claim 3 , wherein the security message comprises the one or more security policies applied to the application session, wherein the generating the security message further comprises:

generating the security message when a network capacity of the network traffic policy is exceeded.

7. The method of claim 3 , wherein the network traffic policy comprises a denial of network access or a traffic shaping control.

8. The method of claim 2 , wherein the one or more security policies comprises a document access policy.

9. The method of claim 8 , wherein the security message comprises the one or more security policies applied to the application session, wherein the generating the security message further comprises:

generating the security message when access to a document is allowed or denied according to the document access policy.

10. The method of claim 9 , wherein the document comprises one or more of the following: a confidential document; a business plan; a document identified by an URL; a video; a web page; a database query result; a file; an email; a voice mail; a fax; a piece of software program; or a photocopy of another document.

11. The method of claim 9 , wherein the security message comprises an identity of the document.

12. The method of claim 1 , wherein the security report is further generated based on user information, wherein the user information comprises one or more of the following: a cubicle or office number; a cubicle or office location; a telephone number; an email address; a mail-drop location; a department name or identity; or a manager name.

13. A computer program product generating a report for one or more application session records, the computer program product comprising:

a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code configured to:

recognize an application session between a network and an application via a security gateway;

determine by the security gateway a user identity from an application session record for the application session, wherein the application session record comprises the user identity used for accessing the network through a host, a host identity for the host, and an application session time, wherein the computer readable program code configured to create the application session record is further configured to:

query an identity server by sending the host identity and the application session time in the application session record, wherein the identity server comprises an access session record for an access session between a second host and the network, wherein the access session record comprises a second user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time,

wherein the identity server compares the host identity in the application session record with the second host identity in the access session record, and comparing the access session time with the application session time,

wherein the identity server returns the second user identity in the access session record, if the host identity in the application session record matches the second host identity in the access session record, and if the access session time matches the application session time; and

store the second user identity as a network user identity used for accessing the network in the application session record;

determine one or more security policies applicable to the application session based on the user identity; and

generate a security report based on the application session record and the one or more security policies.

14. The computer program product of claim 13 , wherein the security report comprises a security message, wherein the computer readable program code configured to generate is further configured to:

generate the security message when one or more of the security policies are applied to the application session.

15. The computer program product of claim 14 , wherein the one or more security policies comprises a network traffic policy.

16. The computer program product of claim 15 , wherein the network traffic policy comprises one or more of the following: a session connection rate; a network capacity; and a file transfer rate.

17. The computer program product of claim 15 , wherein the security message comprises the one or more security policies applied to the application session, wherein the computer readable program code configured to generate the security message is further configured to:

generate the security message when a session connection rate of the network traffic policy is exceeded.

18. The computer program product of claim 15 , wherein the security message comprises the one or more security policies applied to the application session, wherein the computer readable program code configured to generate the security message is further configured to:

generate the security message when a network capacity of the network traffic policy is exceeded.

19. The computer program product of claim 15 , wherein the network traffic policy comprises a denial of network access or a traffic shaping control.

20. The computer program product of claim 14 , wherein the one or more security policies comprises a document access policy.

21. The computer program product of claim 20 , wherein the security message comprises the one or more security policies applied to the application session, wherein the computer readable program code configured to generate the security message is further configured to:

generate the security message when access to a document is allowed or denied according to the document access policy.

22. The computer program product of claim 21 , wherein the document comprises one or more of the following: a confidential document; a business plan; a document identified by an URL; a video; a web page; a database query result; a file; an email; a voice mail; a fax; a piece of software program; or a photocopy of another document.

23. The computer program product of claim 21 , wherein the security message comprises an identity of the document.

24. The computer program product of claim 13 , wherein the security report is further generated based on user information, wherein the user information comprises one or more of the following: a cubicle or office number; a cubicle or office location; a telephone number; an email address; a mail-drop location; a department name or identity; or a manager name.

25. A system, comprising:

a corporate directory comprising a plurality of security policies; and

a security gateway, wherein the security gateway:

recognizes an application session between a network and an application via a security gateway;

determines a user identity from an application session record for the application session, wherein the application session record comprises the user identity used for accessing the network through a host, a host identity for the host, and an application session time, wherein in creating the application session record, the security gateway:

queries an identity server by sending the host identity and the application session time in the application session record, wherein the identity server comprises an access session record for an access session between a second host and the network, wherein the access session record comprises a second user identity used for accessing the network through the second host, a second host identity for the second host, and an access session time,

wherein the identity server compares the host identity in the application session record with the second host identity in the access session record, and comparing the access session time with the application session time,

wherein the identity server returns the second user identity in the access session record, if the host identity in the application session record matches the second host identity in the access session record, and if the access session time matches the application session time; and

stores the second user identity as a network user identity used for accessing the network in the application session record;

determines one or more security policies applicable to the application session based on the user identity; and

generates a security report based on the application session record and the one or more security policies.

26. The system of claim 25 , wherein the security report comprises a security message, wherein the generates further comprises:

generates the security message when one or more of the security policies are applied to the application session.

27. The system of claim 26 , wherein the one or more security policies comprises a network traffic policy.

28. The system of claim 27 , wherein the network traffic policy comprises one or more of the following: a session connection rate; a network capacity; and a file transfer rate.

29. The system of claim 27 , wherein the security message comprises the one or more security policies applied to the application session, wherein the generates the security message further comprises:

generates the security message when a session connection rate of the network traffic policy is exceeded.

30. The system of claim 27 , wherein the security message comprises the one or more security policies applied to the application session, wherein the generates the security message further comprises:

generates the security message when a network capacity of the network traffic policy is exceeded.

31. The system of claim 27 , wherein the network traffic policy comprises a denial of network access or a traffic shaping control.

32. The system of claim 26 , wherein the one or more security policies comprises a document access policy.

33. The system of claim 32 , wherein the security message comprises the one or more security policies applied to the application session, wherein the generates the security message further comprises:

generates the security message when access to a document is allowed or denied according to the document access policy.

34. The system of claim 33 , wherein the document comprises one or more of the following: a confidential document; a business plan; a document identified by an URL; a video; a web page; a database query result; a file; an email; a voice mail; a fax; a piece of software program; or a photocopy of another document.

35. The system of claim 33 , wherein the security message comprises an identity of the document.

36. The system of claim 25 , wherein the security report is further generated based on user information, wherein the user information comprises one or more of the following: a cubicle or office number; a cubicle or office location; a telephone number; an email address; a mail-drop location; a department name or identity; or a manager name.