Using host-based firewalls does offer organizations a high degree of flexibility: in cloud environments, it’s possible to clone VMs, move applications and VMs within the cloud provider’s infrastructure, or even between cloud environments (from AWS to Azure, for example), and in these cases host-based firewalls can move together with the VMs, with the security policy following them.