You start by registering Palo Alto Networks as the

Resource Provider

. In the Azure console

Settings

section, select

Resource providers

. Search for Palo Alto Networks Cloud NGFW and select

PaloAltoNetworksCloudngfw

, then click

Register

.

You then log in to the Azure portal to create Cloud NGFWs and it's policy rules. When you create an NGFW, you specify the Azure VNets or vWANs and the subnets that you need to secure. After creating the NGFW, you must update the route tables for your gateways and subnets to route all traffic to the NGFW for inspection.