The firewall
redistributes the tags for the dynamic user group to the listening
redistribution agents, which includes other firewalls, Panorama,
or a Dedicated Log Collector, as well as Cortex applications.
To support
redistribution for dynamic user group tags, all firewalls must use
PAN-OS 9.1 to receive the tags from the registration sources.
The
firewall redistributes the tags for the dynamic user group to the
next hop and you can
configure log forwarding to
send the logs to a specific server. Log forwarding also allows you
to use
auto-tagging to
automatically add or remove members of dynamic user groups based on
events in the logs.