A request to establish a communication session between the first communication endpoint and a second communication endpoint is received. For example, the request may be a Session Initiation Protocol (SIP) INVITE message to establish a voice communication session. A security classification for the communication session is determined. For example, the determined security classification may be that the call is top secret or unclassified. The security classification is not based on whether the communication session is solely encrypted. The security classification is inserted into the request to establish the communication session. The request to establish the communication session with the security classification is sent to the second communication endpoint. This allows the second endpoint to display the security classification. A similar process is used in a response to the request to establish the communication session to convey the security classification to the first communication endpoint.