Task 3. Validate tenant network and IP settings

Validate tenant network and IP settings for Cortex XSOAR 8.10 On-prem.

Since the Cloud platform handles network and IP settings, skip the Host Configuration → Network Configuration settings in the textual UI. For a Cloud VM deployment, if you save the Network Configuration in the textual UI, a known issue in this version may prevent you from accessing the textual UI.

Confirm the following network and IP settings are added to the rules of the security group or the firewall rules for each node in a cluster (for standalone there is just a single node). If they are not added to the rules, the installation may fail.

Port configurations

Communication ports

For standalone (one VM) and a three-node cluster (three VMs):

Port	Protocol	Purpose
22	TCP	SSH communication
8880	TCP	Node communication

Control plane ports

A Kubernetes cluster consists of a control plane and one or more worker nodes. For Cortex XSOAR, in standalone (one VM), the VM acts as both control plane and as a worker node. In multi-node clusters, the first three nodes act as both control plane and as worker nodes, and any additional node added acts as a worker node.

Name	Port	Protocol
etcd client port	2379	TCP
etcd peer port	2380	TCP
Kubernetes API	6443	TCP
Kubelet API	10250	TCP
kube-scheduler	10257	TCP
kube-controller-manager	10259	TCP

Worker node port

Name	Port	Protocol
kube nodeport range	30000:32767	TCP

Intra-node port

For a multi-node cluster (three VMs):

Name	Port	Protocol
Calico with IPv4 Wireguard	51820	UDP

URLs

Check the following URLs to ensure Cortex XSOAR operates properly.

Function	Service	Port	Direction
Web interface	HTTPS	443	Inbound
Engine connectivity	HTTPS	443 (configurable)	Inbound
Integrations	Integration-specific ports		Outbound
Unit42 Intel Inventory (TIM license)	https://unit42intel.xsoar.paloaltonetworks.com	443	Outbound
Marketplace	https://marketplace.xsoar.paloaltonetworks.com/ Download content packs and view the Marketplace (to view content pack images, the domain should also be reachable from the browser). storage.googleapis.com Download content packs and view the Marketplace. This domain stores content pack artifacts (to view content pack images, the domain should also be reachable from the browser). It is possible to further limit the url prefix to: https://storage.googleapis.com/marketplace-dist/ api.demisto.com Download content Packs and view the Marketplace (this file maps the Marketplace URL to the Cortex XSOAR version). You must add marketplace.xsoar.paloaltonetworks.com, storage.googleapis.com, and api.demisto.com otherwise you cannot access the Marketplace. xsoar-contrib.pan.dev Contribute content packs.	443	Outbound
On-prem Gateway	onpremgw.crtx.[region].paloaltonetworks.com Cortex XSOAR accesses new versions from and uploads licenses to this repository.	443	Outbound
Download packages required for installation	deb.debian.org security.debian.org	80	Outbound