To secure applications and prevent threats in an environment
where new users and servers are constantly emerging, your security
policy must be nimble. To be nimble, the firewall must be able to
learn about new or modified IP addresses and consistently apply
policy without requiring configuration changes on the firewall.
This capability is provided by the coordination between the
Dynamic Address Groups
on the firewall. The firewall and Panorama provide an automated
way to gather information on the virtual machine (or guest) inventory
on each monitored source and create policy objects that stay in
sync with the dynamic changes on the network.