1. A method of providing firewall support for moving a data compute node (DCN) across data centers, each data center comprising a network manager, the method comprising: receiving a set of global firewall rules to enforce across a plurality of data centers, the set of global firewall rules utilizing unique identifiers recognized by the network manager of each of the plurality of data centers; distributing the set of global firewall rules to the network manager of each data center; receiving an indication that a DCN operating on a first host in a first data center is migrating to a second host operating in a second data center; sending a set of firewall session states to the network manager of the second data center; receiving an indication that the migrated DCN on the second host is powered on; and enforcing firewall rules for the migrated DCN using the firewall session states and the global firewall rules.