1. A computer-readable non-transitory medium comprising one or more instructions that when executed on a processor configure the processor to perform one or more operations for redirected firewall discovery, the one or more operations comprising: intercepting, at a first firewall in a network environment, a network flow from a source node; when the first firewall does not have metadata associated with the network flow in a metadata cache of the first firewall or the first firewall is unable to retrieve the metadata associated with the network flow, sending a discovery redirect from a host manager to cause a firewall cache at the source node to include a second firewall; receiving the metadata associated with the network flow at the second firewall; and correlating, at the second firewall, the metadata with the network flow to apply a network policy at the second firewall to the network flow.