A dynamic address group populates its members dynamically using look ups for tags and tag-based filters.
Tags are metadata elements or attribute-value pairs that are registered for each IP address. Tag-based filters use logical and and or operators to match the tags and determine the membership of the dynamic address group. For example, you can create a dynamic address group that includes all IP addresses that have the tags
"web-server" and "linux". You can also use static tags as part of the filter criteria. References: Policy Object:
Address Groups, Use Dynamic Address Groups in Policy, Statics vs. Dynamic Address Objects Groups