Start with the Cloud NGFW service for Azure.
You start by registering Palo Alto Networks as the Resource Provider. In the
Azure console Settings section, select Resource providers. Search for
Palo Alto Networks Cloud NGFW and select PaloAltoNetworksCloudngfw, then
click Register.
You then log in to the Azure portal to create Cloud NGFWs and it's policy
rules. When you create an NGFW, you specify the Azure VNets or vWANs and the subnets
that you need to secure. After creating the NGFW, you must update the route tables
for your gateways and subnets to route all traffic to the NGFW for inspection.