Dynamic Address Groups are used in policy. They
allow you to create policy that automatically adapts to changes—adds, moves, or
deletions of servers. It also enables the flexibility to apply different rules
to the same server based on tags that define its role on the network, the
operating system, or the different kinds of traffic it processes.