Configures network group (netdestination) profiles on the
device. A netdestination is a reusable named object that
defines a set of network destinations for use in firewall
policies and session ACLs. When an ACL rule references a
netdestination by name as a source or destination alias,
traffic is matched against all entries in that group.
Each network group can contain entries of type host (single
IP), FQDN (domain name), address-range (IP range), network
(subnet prefix), VLAN (VLAN-based override), port (protocol
port or port range), or interface (tunnel or null interface).
Additional features include inversion (match all destinations
except those in the group) and exclusion (subtract entries
of another netdestination from this group). Supported on
AP, Gateway, SW_CX and SW_PVOS platforms.