Specifications

VM-Series Deployment Guide 15
About the VM-Series Firewall Monitor Changes in the Virtual Environment
Step 2 Create dynamic address groups on the
firewall.
View the tutorial to see a big picture view
of the feature.
1. Log in to the web interface of the firewall.
2. Select
Object > Address Groups.
3. Click
Add and enter a Name and a Description for the address
group.
4. Select
Type as Dynamic.
5. Define the match criteria. You can select dynamic and static tags
as the match criteria to populate the members of the group.
a. Click
Add Match Criteria, and select the And or Or operator
and select the attributes that you would like to filter for or
match against.
b. Click
OK.
6. Click
Commit.
The match criteria for each dynamic address group in this example is as follows:
ftp_server: matches on the guest operating system “Linux 64-bit” and annotated as “ftp” ('guestos.Ubuntu Linux 64-bit'
and 'annotation.ftp').
web-servers: matches on two criteria—the tag black or if the guest operating system is Linux 64-bit and the name of the
server us Web_server_Corp. ('guestos.Ubuntu Linux 64-bit' and 'vmname.WebServer_Corp' or 'black')
Use Dynamic Address Groups in Policy (Continued)
Click to see members
/registered IP addresses