Both the portal internal zone and the external zone need a separate license. This makes it possible to attach several DMZ portal instances to one internal instance.
In addition to other licensed functionalities, the license must contain the feature "OS4X Portal":