To use URL Analysis, you will need to have a Tier-1 gateway and a Layer 7 DNS firewall rule on the NSX Edge cluster. Additionally, you will need to configure an OFW rule allowing traffic OUT to the Internet. Lastly, a medium-sized edge node (or higher), or a physical form factor edge is also required as the URL Analysis service will run on the edge node. For more information, please see this VMware Documentation article[1], which explains how to configure URL Analysis on NSX.
[1] https://docs.vmware.com/en/VMware-NSX-T-Data-Center/3.1/nsxt_31_url_analysis/GUID-46BC65F3-7A45-4A9F-B444-E4A1A7E0AC4A.html

Reference:
This allows for the Partner SVM to be close to the compute nodes, allowing for faster processing of the traffic and improved security. Additionally, the Partner SVM is also deployed close to the Partner Manager for added security and ease of management.

Next Generation Firewalls are capable of analyzing application traffic at Layer 7 of the OSI model. Layer 7 is the Application Layer, which is where the application-level protocols, such as HTTP and FTP, are implemented. Next Generation Firewalls are able to inspect the application traffic and apply rules based on the content of the application-level packets.
For more information on the OSI model and Next Generation Firewalls, please refer to the following resources:
* OSI Model: https://en.wikipedia.org/wiki/OSI_model * Next Generation Firewalls: https://en.wikipedia.org/wiki/Next-generation_firewall