Installation

Documentation for Cortex XSOAR On-prem 8.5 (EoL).

Install Cortex XSOAR by downloading and deploying an image to one or more virtual machines and then setting up and installing Cortex XSOAR on the virtual machines.

Deploy an image

Cortex XSOAR supports the following image files, which you download from the Cortex Gateway:

• OVA: Supported by VMWare.

  For more information about installing Cortex XSOAR by deploying an OVA image file, see Install Cortex XSOAR from an OVA image.
• VHD: Supported by Microsoft Hyper-V.

  For more information about installing Cortex XSOAR by deploying a VHD image file, see Install Cortex XSOAR from a VHD image

You can deploy the image on your platform as a single node (standalone) or a cluster of three nodes, where each node is a dedicated virtual machine (VM).

After you deploy and log into your virtual machine, a textual UI menu is displayed enabling you to configure IP settings, proxy, and trust between all notes in a cluster and then to install Cortex XSOAR.

Set up and install standalone

Installing on a standalone node involves:

• Setting up one VM.
• From the textual UI Cluster Installation menu, install the cluster from one node, including setting the IP address of the node.

Set up and install a cluster

Installing on a cluster involves:

• Set up multiple VMs.
• From the textual UI:

  • In the Connect Nodes menu, connect the VMs (establishing trust between all nodes in the cluster).
  • In the Cluster Installation menu, select one node to install the cluster from, including setting the IP addresses of each node.

Note

When deciding how many nodes to deploy, consider the following:

• Currently, if you deploy a single node (standalone), you can't switch to a cluster of three nodes.
• If you deploy a cluster of three nodes, coming soon you can implement out-of-the-box high availability (HA) by replicating data between the nodes in the cluster.