Install and configure the Panorama plugin for Cisco TrustSec to retrieve the IP addresses of endpoints in your environment and build security policy for those endpoints using Dynamic Address Groups.