> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/engines/engine-installation.md). # Engine Installation You can install Cortex XSOAR engines on all Linux and Windows machines. Although Cortex XSOAR engines are intended for Linux operating systems, they can be used on Windows, but Docker on Windows machines must be configured to run Linux containers. Docker/Podman needs to be installed before installing an engine. If you are using the Shell installer for an engine, Docker/Podman is installed automatically. **Engine Hardware Requirements** If your hard drive is partitioned, we recommend a minimum of 50GB for the **`/var`** partition for your development environment, and 50GB for the **`/var`** partition for your production environment. If you are using RHEL 8.x and Podman, we recommend allocating a minimum of 50GB for the /home partition and 50GB for the /var partition. | Component | Dev Environment Minimum | Production Minimum | | --------- | ----------------------- | ------------------ | | CPU | 8 CPU cores | 16 CPU cores | | Memory | 16GB RAM | 32GB RAM | | Storage | 100GB | 100GB | {% hint style="info" %} ### Note If using Podman, we recommend reserving 150 GB for container storage, either in the `/home` partition or a different storage directory that you have set using the `rootless_storage_path` key. For more information, see [Podman Overview](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/podman/podman-overview.md). {% endhint %} **Operating System Requirements** You can deploy a Cortex XSOAR engine on the following operating systems: | Operating System | Supported Versions | | ---------------- | -------------------------------------------------- | | Ubuntu | 18.04, 20.04, 22.04, 24.04 | | RHEL |

8.x, 9.x

Includes all minor versions.

| | Oracle Linux | 7.x, 8.9, 9.3, 9.4. 10.1 | | Amazon Linux | 2, Amazon Linux 2023 | | Rocky Linux | 9.5, 9.6 | {% hint style="info" %} ### Note * Make sure the latest Cortex XSOAR version is installed. * RHEL 7x reached End of Life (EOL) on June 30, 2024, and is no longer a supported operating system. * CentOS 8.x reached EOL on December 31, 2021, and is no longer a supported operating system. * CentOS 7.x reached EOL on June 30, 2024, and is no longer a supported operating system. {% endhint %} **Engine Required URLs** You need to allow the following in the URLs for Cortex XSOAR engines to operate properly. | FUNCTION | SERVICE | PORT | DIRECTION | | ------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | -------------------------- | --------- | | Integrations | | Integration-specific ports | Outbound | | Engine connectivity | HTTPS | 443 (configurable) | Outbound | | Docker/Podman |

Note

Docker URLs may change. For the current list, see . Note that some URLs in the allow list are for Docker Desktop and are not required for Cortex XSOAR.

| 443 | Outbound | **Engine Installation Types** Before you install the engine, you need to define the base URL in the **Settings** page so the engine can communicate with the server. The base URL is the external IP address of your Cortex XSOAR server. If you do not define the base URL, you need to add it to the **`d1.conf`** file after you create the engine. * **Shell**: For all Linux deployments except RHEL 7.x (for example Ubuntu, RHEL 8.x, or later, etc.). Automatically installs Docker/Podman, downloads Docker/Podman images, enables remote engine upgrade, and allows installation of multiple engines on the same machine. For RHEL 7.x, see [Install Docker Distribution for Red Hat on Cortex XSOAR](https://app.gitbook.com/s/IWHPB8LtGrWulD6OXGWq/docker/docker-installation/install-docker-distribution-for-red-hat-on-cortex-xsoar). The installation file is selected for you. Shell installation supports the purge flag, which by default is false.

Note

When upgrading a Shell type engine, you can use the Upgrade Engine feature in the Engines page. For RHEL 7 type engines, you need to upgrade these engine types using a zip type engine and not use the Upgrade Engine feature.

* **DEB**: For Ubuntu operating systems. * **RPM**: RHEL operating systems. If you require a signed RPM file for installation, [Install a Signed Engine](#UUID-6fd91d30-ed56-a101-54f1-b746debcd056).

Note

Use DEB and RPM installation when shell installation is not available.

* **Zip**: Used for Windows machines. * **Configuration**: Configuration file for download. When you install one of the other options, this config file (d1.conf) is installed on the engine machine. {% hint style="info" %} ### Note * For DEB/RPM and Windows engines, Python (including 3.x) and containerization platform ([Docker](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/docker/docker-installation.md)/[Podman](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/podman.md)) must be installed and configured. * For Docker or Podman to work correctly on an engine, [IPv4 forwarding](https://docs.docker.com/network/bridge/#enable-forwarding-from-docker-containers-to-the-outside-world) must be enabled. If installing on RHEL v7 you need to install Mirantis Container Runtime. For more information, see [System Requirements](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/single-server-deployment/system-requirements.md). * For air-gapped users, you can [Install a Cortex XSOAR Engine Offline](#UUID-cc730522-e8b2-4a0e-96a5-daed5440104b). If you need a signed RPM file for installing an engine, follow the procedure in [Install a Signed Engine](#UUID-6fd91d30-ed56-a101-54f1-b746debcd056). * For engines installed on RHEL machines and using Podman as containerization platform [Configure the SELinux Policy for PowerShell Integrations](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/podman/configure-the-selinux-policy-for-powershell-integrations.md) (add **`python.pass.extra.keys`** and **`powershell.pass.extra.keys`** configurations to the engine). {% endhint %} **How to Install a Cortex XSOAR Engine** To install an engine, do one of the following: * [Install a Cortex XSOAR Engine](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine.md) * [Install a Signed Engine](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/engines/engine-installation/install-a-signed-engine.md) * [Install a Cortex XSOAR Engine Offline](/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/engines/engine-installation/install-a-cortex-xsoar-engine-offline.md) --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://cortex-docs.paloaltonetworks.com/xsoar-6-administrator-guide/6.13/learn-about-cortex-xsoar/onboarding-in-cortex-xsoar/engines/engine-installation.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.