This capability is provided by the coordination between the
VM
Information Sources
and
Dynamic Address Groups
features
on the firewall. The firewall and Panorama provide an automated
way to gather information on the virtual machine (or guest) inventory
on each monitored source and create policy objects that stay in
sync with the dynamic changes on the network.