Reducing redundant operations performed by members of a cooperative security fabric

A method comprising:

• receiving, by a first network security appliance of a private network that is participating in a cooperative security fabric (CSF), network traffic that is to be inspected by the first network security appliance;
• determining, by the first network security appliance, whether the network traffic has been transmitted from a second network security appliance that is participating in the CSF based on the source address of the network traffic;
• when the network traffic is determined to have been transmitted from the second network security appliance:
• determining, by the first network security appliance, one or more network security operations that are executed by the second network security appliance;
• determining, by the first network security appliance, one or more local network security operations to be executed by the first network security appliance based on the one or more network security operations that are executed by the second network security appliance;
• and
• executing, by the first network security appliance, the one or more local network security operations on the network traffic.