There is a required Control license (free) but it only gives very basic capability. Most people start with IPS subscription and then optionally add URL Filtering and AMP (Malware) licenses. Those three are available separately or bundled and they all cost money. You buy them for 1-, 3- or 5-year term.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: