Which PAN-OS feature allows for automated updates to address objects when VM-Series firewalls are setup...

Dynamic Address Groups in PAN-OS allow for automated updates to address objects when VM-Series firewalls are set up as part of an NSX deployment. These address groups can dynamically include members based on criteria such as tags, enabling automated and flexible security policies that adjust to changes in the virtual environment.

References:

Palo Alto Networks Dynamic Address Groups: Dynamic Address Groups

NSX and VM-Series Integration: NSX Integration Guide