Activate the FedRAMP High CDSS License

1. Review and allow the NetSec FedRAMP High FQDNs on your network.

   Your devices require the CDSS FedRAMP High FQDNs to communicate with each service.
2. Log in to the commercial Customer Support Portal and register your NGFW.

   Skip this step if you activating the FedRAMP High CDSS for NGFW that you already registered.
3. Activate the FedRAMP High CDSS license in the commercial Customer Support Portal.

   Repeat this step for all impacted NGFW.

   1. Log in to the commercial Customer Support Portal.
   2. Select ProductsAssets and find your NGFW by serial number.
   3. Select the Licenses & Subscriptions tab.
   4. For each authorization code, click Activate License and enter the authorization code.
   5. Confirm the activation.

      The FedRAMP CDSS HIGH license and your activated subscriptions appear in the license list.
4. Link your commercial Customer Support Portal account to your FedRAMP High Customer Support Portal account.

   This one-way link makes the devices and licenses from your commercial account visible in the FedRAMP High boundary. If you plan to activate any additional license using a magic link, you must link your commercial Customer Support Portal account to your FedRAMP High Customer Support Portal account before you activate a license using a magic link.

   1. Log in to the FedRAMP Customer Support Portal.
   2. Select Account ManagementManage Linked Accounts.
   3. Click Request Account Link.
   4. For Device Serial Number, enter the serial number of a device on your commercial account.
   5. For Sales Order Number, enter a sales order number associated with your commercial account.

      You receive both numbers when you purchase the FedRAMP High subscriptions.
   6. Click Submit.

      The Manage Linked Accounts page lists the Account Id and Account Name of the linked commercial account.
5. After you link your accounts, activate any additional subscriptions activated through a magic link subscriptions.

   Magic link activation requires the linked account because the Activation Console looks for your NGFW inside your FedRAMP account.
6. Verify that the NGFW is classified as FedRAMP High.

   1. Log in to the FedRAMP Customer Support Portal.
   2. Select AssetsDevices and find your NGFW by serial number.

      The page lists all devices from your linked commercial account, including devices you don't use in FedRAMP High, and you can't filter the list. To filter it, click Export To CSV.
   3. Confirm that the FedRAMP CDSS HIGH and US Government Premium licenses appear for the NGFW.

      Any NGFW with the FedRAMP CDSS HIGH license is a FedRAMP High device. If the NGFW doesn't appear, confirm that you completed the account link. If the modifier license is missing, confirm that you activated the FedRAMP High authorization code on the commercial Customer Support Portal.
7. Change each service FQDN to the FedRAMP High FQDN.

   You must configure each service FQDN included in the CDSS FedRAMP High license independently.
8. Verify CDSS Service Connectivity to ensure your NGFW can successfully reach all CDSS services.