Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?
Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup as part of an NSX deployment?
The PAN-OS feature that allows for automated updates to address objects when VM-Series firewalls are set up as part of an NSX deployment is 'Dynamic Address Group'. This feature dynamically updates the members in a group based on match criteria and thus ensures that security policies are always applied to the most current set of addresses, which is essential in dynamic virtual environments such as an NSX deployment.
D is the answer. https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/monitor-changes-in-the-virtual-environment/use-dynamic-address-groups-in-policy