Advanced Threat Prevention (similar to other Palo Alto Networks security
services) is administered through security profiles, which in turn is dependent
on the configuration of network enforcement policies as defined through security
policy rules.
You use the Cloud NGFW for Azure to
enable Advanced Threat Prevention for the rulestack, however, you must use
Panorama to configure the policies that comprise the security
service.
To configure Advanced URL Filtering policy rules using Panorama: