The only solution I can think on the top of my head is deploying SCE8000 along with Policy Server, thus you can have global visibility of the transit traffic. Of course this is not cheap.