> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.8/onboard-cortex-xsoar/cortex-xsoar-installation/installation-overview.md).

# Installation overview

Cortex XSOAR is delivered as a self-contained virtual appliance. It includes a built-in, distributed data store that handles all database, caching, and data warehousing functions.

{% hint style="info" %}

### Note

As the data store is an integral part of Cortex XSOAR, you don't need to connect to an external Elasticsearch cluster. You do not need to procure, license, or manage a separate Elasticsearch instance. The necessary components are included within your Cortex XSOAR license.
{% endhint %}

Before installing Cortex XSOAR, ensure your environment meets all requirements, avoiding installation issues and enabling a smooth setup. Depending on your needs, decide whether to deploy a standalone node or a cluster of three nodes for optimal performance.

| Deployment mode | Overview                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| --------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Standalone      | <p>Standalone uses a single node, which is more suitable for small-scale data scenarios. A node is a virtual machine (VM) with a distinct host IP address that runs the Cortex XSOAR application.</p><p>Deployment on a standalone environment involves setting up one VM. After deploying the relevant image file, a textual UI guides you through the installation process, which includes installing the cluster from one node and setting the node's IP address.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p><strong>Note</strong></p><p>Currently, if you deploy a single node (standalone), you can't switch to a cluster of three nodes.</p></div>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Cluster         | <p>A cluster is a group of three nodes that are managed together and participate in workload management. It is suitable for large-scale data production environments and High Availability and load balancing.</p><p>For more information about High Availability, see <a href="/spaces/7HkFeeCibkdZoGaTJCzm/pages/lVXt0OFf1UXBY3dwNHLK">High Availability for Cortex XSOAR</a>. For more information about load balancing, see <a href="/pages/iLGl1jRiBU2hYl6TIBD1">Load balancing for Cortex XSOAR</a>.</p><p>Deployment on a cluster involves:</p><ul><li>Setting up multiple VMs</li><li><p>Configuring the nodes</p><p>After deploying the relevant image file, configure the nodes by opening the textual UI:</p><ul><li>In the <strong>Connect Nodes</strong> menu, connect the VMs (establish trust between all nodes in the cluster).</li><li>In the <strong>Cluster Installation</strong> menu, select one node from which to install the cluster, including setting the IP addresses of each node. To implement High Availability, set the FQDN IP address to either a virtual IP or a reverse proxy/ingress controller as a single entry point to distribute traffic across the nodes in the cluster.</li></ul></li></ul> |

{% hint style="info" %}

### Note

Each node must meet the minimum specifications, depending on whether you require extra small, small, medium, or large scale. For more information, see [System Requirements](/cortex-xsoar-8-on-prem/8.8/onboard-cortex-xsoar/cortex-xsoar-installation/system-requirements.md).
{% endhint %}

#### Supported deployment platforms

Cortex XSOAR supports the following image files, which are downloaded from Cortex Gateway:

| Image file | Platform                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| OVA        | <p>Deploy on the following platforms:</p><ul><li>AWS: For more information, see <a href="/pages/EFfLoMvgdobCKgLty72C">Install Cortex XSOAR on a VM deployed on AWS</a>.</li><li>OCI: For more information, see <a href="/pages/l5sOAXBgQxkxjavokvh0">Install Cortex XSOAR on a VM deployed on OCI</a>.</li><li>VMWare: For more information, see <a href="/pages/5VLWxLyajaghLPsteP0N">Install Cortex XSOAR on a VM deployed on VSphere</a>.</li></ul> |
| VHD        | Deploy on Microsoft Hyper-V. For more information, see [Install Cortex XSOAR on a VM deployed on Hyper-V](/cortex-xsoar-8-on-prem/8.8/onboard-cortex-xsoar/cortex-xsoar-installation/install-cortex-xsoar-on-a-vm-deployed-on-hyper-v.md).                                                                                                                                                                                                             |

#### Post-installation

After installation, add your license to Cortex XSOAR and set up a secure HTTP connection, if required.

You can optimize system performance, such as adding or removing nodes in a cluster. For more information, see [Post-installation](/cortex-xsoar-8-on-prem/8.8/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation.md) and [Optimize performance and robustness from the textual UI](/cortex-xsoar-8-on-prem/8.8/onboard-cortex-xsoar/cortex-xsoar-installation/post-installation/optimize-performance-and-robustness-from-the-textual-ui.md).


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsoar-8-on-prem/8.8/onboard-cortex-xsoar/cortex-xsoar-installation/installation-overview.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.