PAN-OS 6.0, 6.1, 7.0
Question
How to Clear IP Addresses in a Dynamic Address Group.
Resolution
The following CLI command can be used to clear a specific IP addresses in a Dynamic Address group:
> debug object registered-ip clear ip <ip/netmask>
The following CLI command can be used to delete all registered IPs:
> debug user-id clear registered-ip all
Note:
In order for the IP's to be cleared properly, the User-ID process may have to restarted with the command:
PAN-OS 6.1 and earlier versions:
> debug software restart user-id
PAN-OS 7.0 and newer versions:
> debug software restart process user-id
owner: saryan