When is it necessary to activate a license when provisioning a new Palo Alto Networks firewall?

Configuring Certificate Profiles is a fundamental security function of the firewall and does not require a specific license activation.

While GlobalProtect features may require subscriptions, the mere configuration of a GlobalProtect portal does not inherently trigger a separate license activation requirement beyond the base feature enablement.

Configuring User Activity Reports relies on User-ID, but the reporting feature itself does not necessitate a distinct license activation upon firewall provisioning.

Antivirus Dynamic Updates are a subscription service that requires an active license to download and apply the latest antivirus signatures, which is crucial for protecting against emerging threats.