When importing security policies, Security Director Cloud (SDC) automatically renames certain objects by appending “_Grp” to their names.

After importing policies, range-address objects appear with the suffix “_Grp.”

This is an expected behavior change introduced with the SDC 25.2.2 release. 

Prior to 25.2.2 the range-address is imported as a range and deployed as an address group with same name as range. Now with 25.2.2, the change is, it is imported as a range with _Grp to convey that it's creating as a group. In this way as SDC creating as Address-group (address-set).

Example output:

## Global address book configurations ##
set security address-book global address AddressGroup_Grp-mem1 192.168.1.1/32
set security address-book global address AddressGroup_Grp-mem0 192.168.1.2/32
set security address-book global address-set AddressGroup_Grp address AddressGroup_Grp-mem0
set security address-book global address-set AddressGroup_Grp address AddressGroup_Grp-mem1

## Security Firewall Policy : MGMT - LAN ##
set security policies from-zone MGMT to-zone LAN policy <PolicyName> match destination-address  AddressGroup_Grp
delete security policies from-zone MGMT to-zone LAN policy <PolicyName> match destination-address AddressGroup