The earliest recollection of this bug is traced back to PAN-OS 9.1.7 - July 29, 2024. This bug is fixed in PAN-OS versions 9.1.7. Fixed an issue where the dynamic address group learned in the parent dynamic group was not pushed to the child dynamic address group if the child dynamic address group was not configured with notify groups under the respective plugin. When using the CLI command debug dau settings device-group recursive yes/no , clear previous dynamic address group entries from the Panorama database using the CLI command debug dau clear database device-group for all dynamic address groups under the hierarchy for the dynamic address group configured in the monitoring definition. Also, do a full sync from the plugins configured using the command request plugins sync . For more information: https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-addressed-issues/pan-os-9-1-7-addressed-issues