Dynamic-address group rescan enhancement

In the current dynamic-address implementation, when you add a host address to the dynamic-address group, the system does not terminate and rescan the existing sessions of the host. When you add a host address to the dynamic-address group, the system rescans the sessions including the existing sessions to ensure that the traffic matches the updated policy. The session-scan option is disabled by default. You can enable the session-scan option at the [edit security dynamic-address address-name name session-scan] or [edit security dynamic-address session-scan] hierarchy level.