The earliest recollection of this bug is traced back to PAN-OS 10.1.2 - July 29, 2024. This bug is fixed in PAN-OS versions 10.1.2, 9.1.11. ( Panorama appliances on PAN-OS 10.0 releases only ) Fixed an issue with Security policy rule configuration where, in the Source and Destination tabs, the Query Traffic setting was not available for Address Groups. For more information: https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-release-notes/pan-os-10-1-2-known-and-addressed-issues/pan-os-10-1-2-addressed-issues https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-release-notes/pan-os-9-1-addressed-issues/pan-os-9-1-11-addressed-issues