How do I Create a security policy rule called Block$\_$Bad$\_$URLs with the following characteristics:

$$ For all outbound traffic, the URL categories hacking, phishing, malware, and unknown

must be blocked by a security policy rule match criterion.