Static and Dynamic Address Groups

To simplify the creation of security policies, addresses that require the same security settings can be combined into address groups. An address group can be static or dynamic. Depending on your needs, you may decide that one is better for you (or both). A static address group can include address objects that are static, other dynamic address groups, or both. A dynamic address group populates its members dynamically via tag-based filters.