System and method for policing logical network traffic flows using a ternary content addressable memory (TCAM). An exemplary embodiment can provide a network port that is associated with a plurality of entries of a TCAM, where each TCAM entry contains a value. Further, each TCAM entry can be assigned a priority and associated with at least one allow/drop action. A predefined set of values can be retrieved from at least one header field of a data packet processed by the network port. Each value in the predefined set of values can be aggregated into a search value, and the search value can be compared to the value contained in each TCAM entry. When a match is found between the search value and the value contained in a TCAM entry, the allow/drop action associated with the matching TCAM entry can be performed.