To enable the firewall to scan the traffic that it allows based on a Security policy rule, you must also attach Security Profiles -including URL Filtering, Antivirus, Anti-Spyware, File Blocking, and WildFire Analysis-to each rule. To attach a Security Profile to a Security policy rule, you must select Profiles as the Profile Type in the Actions tab of the rule. This allows you to choose from the predefined or custom Security Profiles that you have configured. Group-Profiles, Default-Profiles, and Tagged-Profiles are not valid options for attaching Security Profiles to Security policy rules. Reference: Set Up a Basic Security Policy, Security Profiles, Updated Certifications for PAN-OS 10.1