1. One or more computer-readable non-transitory media comprising one or more instructions that, when executed on at least one processors, configure the processor to perform one or more operations for redirected firewall discovery, the one or more operations comprising: transmitting a network flow from a source node to a first firewall; transmitting, from the source node to a second firewall, metadata associated with the network flow; receiving, from the first firewall at the source node, a discovery redirect comprising information identifying the first firewall; and in response to receiving the discovery redirect, transmitting, from the source node to the first firewall, the metadata associated with the network flow, wherein the metadata is associated with a network policy applicable to the network flow at the first firewall.