Plan and prepare your deployment
Plan your Cortex AgentiX deployment by selecting a region, data sources, agents, licensing, and access controls.
Before you start your Cortex AgentiX deployment, consider the following:
Determine the deployment region
Determine the region you want to host Cortex AgentiX and any associated services.
Review your license and add-ons
Review your Cortex AgentiX license and consider the addons for your use case, such as Threat Intel Management.
Consider the data sources to use
Consider the data sources you want to ingest initially.
In Cortex AgentiX content is organized into content packs, which are either downloaded from the Data Sources catalog or from Marketplace. Start planning what content you require.
Review the steps you need to take in your day-to-day SOC operations, and the required third-party tools/applications.
Consider the agents to use
Consider which agents you require? Review the system agents. Download related content packs, if needed, to make system actions available for system agents.
Consider whether to create new custom agents and what actions they would perform.
Consider roles and permissions
Review and plan roles using Role-Based Access Control (RBAC) for your security operations team. Consider user groups and start with the default roles.
Last updated
Was this helpful?
