Hello,
I am not sure what do you mean by activate agents; for shields to work, Avast AV's kernel extensions need to be allowed on the system by the user; there should be directions how to do this in the GUI. Without SIP active, AFAIK it is not necessary to allow kexts.
What are the errors displayed by the shields that are inactive?
Kind regards,
Ondrej Kolacek