Security policies are applied to zones, not interfaces. Zones can reside anywhere in enterprise network. Traffic must be in a Security Zone to be processed
Install licenses through support.paloaltonetworks.com. Configure dynamic updates for security features. Set up DHCP servers for subnet services