Security policy enforcement for additional instances of an application

A system for firewall policy enforcement, the system comprising:

• at least one memory;
• and
• at least one processor coupled to the at least one memory, the at least one processor and the at least one memory configured to:
• receive, at a firewall from a first virtual computing instance (VCI), a registration request comprising a first identifier of the first VCI and a second identifier of a second VCI;
• determine, at the firewall, based on the second identifier included in the registration request, that the second VCI is associated with a network security policy at the firewall;
• apply, at the firewall, based on the first identifier included in the registration request, the network security policy associated with the second VCI to the first VCI;
• and
• allow or disallow network activity for the first VCI based on the applied network security policy.

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• receive, at a firewall from a first virtual computing instance (VCI), a registration request comprising a first identifier of the first VCI and a second identifier of a second VCI;
• determine, at the firewall, based on the second identifier included in the registration request, that the second VCI is associated with a network security policy at the firewall;
• apply, at the firewall, based on the first identifier included in the registration request, the network security policy associated with the second VCI to the first VCI;
• and
• allowing or disallowing network activity for the first VCI based on the applied network security policy.