Providing policy information on an existing communication channel

1. A device, comprising:

a memory; and

one or more processors to:

receive a message for routing to a destination on a communication channel,

the device being a first network device, and

the communication channel having been established between a source of the message and the destination;

determine first policy information related to at least one of the message, the destination, or the source of the message,

the first policy information describing a first action for a second network device to perform, and

the first policy information being determined based on one or more of:

a blacklist that lists one or more of sources or destinations that are to be blocked or banned,

a whitelist that lists one or more of sources or destinations that are deemed acceptable, or

a graylist the lists one or more of sources or destinations that are subject to a particular rule;

associate a first policy token with the message based on the first policy information,

the first policy token including information identifying a different device that stores the first policy information for the second network device; and

provide the message with the first policy token to the second network device on the communication channel to cause the second network device to request the first policy information from the different device based on the first policy token,

second policy information being determined by the second network device after the second network device receives the message with the first policy token,

the first policy token being removed by the second network device after the second network device receives the message with the first policy token,

a second policy token being associated with the message based on the second policy information,

the message being provided with the second policy token by the second network device to a third network device,

a second action being performed by the third network device based on the second policy information after the third network device receives the message with the second policy token, and

the second action including one of:

dropping the message,

monitoring the source of the message,

quarantining the source of the message, or

redirecting traffic to or from the source of the message.

2. The device of claim 1 ,

where the one or more processors, when receiving the message, are further to:

receive first the policy token with the message; and

where the one or more processors, when determining the first policy information, are to:

determine the first policy information based on the first policy token.

3. The device of claim 1 ,

where the device is associated with a first network; and

where the second network device is associated with a second network,

the second network being a network other than the first network.

4. The device of claim 1 ,

where the one or more processors, when associating the first policy token with the message, are further to:

encrypt the first policy token to prevent a malicious party from determining the first policy information; and

where the message with the associated first policy token further cause the second network device to decrypt the first policy token.

5. The device of claim 4 , where the encrypting and the decrypting are performed using at least one of:

a symmetric-key algorithm, or

a public key algorithm.

6. The device of claim 1 , where the one or more processors, when associating the first policy token with the message, are further to:

attach the first policy token to the message, or

insert the first policy token into a portion of the message.

7. The device of claim 1 , where the first policy token is removed from a header associated with the message.

8. A non-transitory computer-readable medium storing instructions, the instructions comprising:

one or more instructions that, when executed by one or more processors of a device, cause the one or more processors to:

receive a message for routing to a destination on a communication channel,

the device being a first network device, and

the communication channel having been established between a source and the destination;

determine first policy information related to the message,

the first policy information describing a first action for a second network device to perform,

the first policy information being determined based on one or more of:

a blacklist that lists one or more of sources or destinations that are to be blocked or banned,

a whitelist that lists one or more of sources or destinations that are deemed acceptable, or

a graylist the lists one or more of sources or destinations that are subject to a particular rule, and

the first policy information describing information related to at least one of the destination or the source;

associate, with the message and based on the first policy information, a first policy token that includes information that identifies a different device that stores the first policy information for the second network device; and

provide the message and the first policy token to the second network device on the communication channel to permit the second network device to request the first policy information from the different device based on the first policy token,

second policy information being determined by the second network device after the second network device receives the message with the first policy token,

a second policy token being associated with the message based on the second policy information,

the message being provided with the second policy token by the second network device to a third network device,

a second action being performed by the third network device based on the second policy information after the third network device receives the message with the second policy token, and

the second action including one of:

dropping the message,

monitoring the source,

quarantining the source, or

redirecting traffic to or from the source.

9. The non-transitory computer-readable medium of claim 8 ,

where the device is associated with a first network; and

where the second network device is associated with a second network,

the second network being a network other than the first network.

10. The non-transitory computer-readable medium of claim 8 ,

where the one or more instructions, that cause the one or more processors to receive the message, further cause the one or more processors to:

receive the first policy token with the message; and

where the one or more instructions, that cause the one or more processors to determine the first policy information, further cause the one or more processors to:

determine the first policy information based on the first policy token.

11. The non-transitory computer-readable medium of claim 8 ,

where the one or more instructions, when executed by the one or more processors, further cause the one or more processors to:

encrypt the first policy token to prevent a malicious party from determining the first policy information; and

where the message and the first policy token further cause the second network device to decrypt the first policy token.

12. The non-transitory computer-readable medium of claim 11 , where the encrypting and the decrypting are performed using at least one of:

a symmetric-key algorithm, or

a public key algorithm.

13. The non-transitory computer-readable medium of claim 8 , where the one or more instructions, that cause the one or more processors to associate the first policy token with the message, further cause the one or more processors to:

attach the first policy token to the message, or

insert the first policy token into a portion of the message.

14. The non-transitory computer-readable medium of claim 8 , where the one or more instructions further cause the one or more processors to:

remove the first policy token from a header associated with the message before providing the message on the communication channel.

15. A method, comprising:

receiving, by a device, a message for routing to a destination on a communication channel,

the device being a first network device, and

the communication channel having been established between a source and the destination;

determining, by the device, first policy information associated with at least one of the message, the source, or the destination,

the first policy information describing a first action for a second network device to perform, and

the first policy information being determined based on one or more of:

a blacklist that lists one or more of sources or destinations that are to be blocked or banned,

a whitelist that lists one or more of sources or destinations that are deemed acceptable, or

a graylist the lists one or more of sources or destinations that are subject to a particular rule;

associating, by the device, the message with a first policy token based on the first policy information,

the first policy token including information identifying a different device that stores the first policy information for the second network device; and

providing, by the device, the message and the first policy token to the second network device on the communication channel to permit or cause the second network device to request the first policy information from the different device based on the first policy token,

second policy information being determined by the second network device after the second network device receives the message with the first policy token,

a second policy token being associated with the message based on the second policy information,

the message being provided with the second policy token by the second network device to a third network device,

a second action being performed by the third network device based on the second policy information after the third network device receives the message with the second policy token, and

the second action including one of:

dropping the message,

monitoring the source,

quarantining the source, or

redirecting traffic to or from the source.

16. The method of claim 15 ,

where receiving the message further comprises:

receiving the first policy token with the message; and

where determining the first policy information comprises:

determining the first policy information based on the first policy token.

17. The method of claim 16 , where receiving the message and the first policy token comprises:

receiving the message and the first policy token from the source,

the source providing the message and the first policy token based on the source being compromised by a malicious party.

18. The method of claim 15 , where associating the first policy token with the message further comprises:

including the first policy token in the message, or

attaching the first policy token to the message.

19. The method of claim 15 , further comprising:

encrypting the first policy token to impede a malicious party from determining the first policy information; and

where providing the first policy token to the second network device comprises:

providing the first policy token to the second network device to permit the second network device to decrypt the first policy token.

20. The method of claim 15 , further comprising:

removing the first policy token from a header associated with the message before providing the message on the communication channel.