A dynamic-key group is a VPN object that contains information common to all VPN connections that are associated with a single policy filter rule.