Options B and C seem the most relevant to the question. Palo Alto's support for Dynamic Address Groups and a fully instrumented API would definitely help with automated provisioning.
Yes, I agree with Valentin. Support for Dynamic Address Groups is also important for automatically provisioning security instances and policies on demand.
Rosina
2 hours agoMinna
4 hours agoValentin
4 days ago