Deployment Guidelines
Review Cortex XSOAR 6.13 deployment guidelines for AWS EC2, Azure, or GCP.
Before you install Cortex XSOAR, review the following deployment guidelines:
AWS EC2 Deployment Guidelines
AWS EC2 deployments have specific technical and sizing requirements, and a set of Cortex XSOAR best practices.
After you configure and verify your AWS EC2 deployment, install the Cortex XSOAR Server.
Supported AWS EC2 Instance Types
Cortex XSOAR server installation is supported on the following Amazon EC2 instance types.
M5
m5.4xlarge
m5.12xlarge
m5.24xlarge
M4
m4.4xlarge
m4.10xlarge
m4.16xlarge
C5
c5.4xlarge
c5.9xlarge
c5.18xlarge
C4
c4.4xlarge
c4.8xlarge
R4
r4.4xlarge
r4.8xlarge
r4.16xlarge
T2
Only use this instance type for evaluation and testing.
Supported EC2 Storage
We recommend that you use EBS-optimized2 instances (included in C4,M4 instance family types).
Network and Security
Inbound connections: Cortex XSOAR server requires that you open HTTPS port 443 for inbound connections.
Outbound connections: outbound ports depending on your integrations and specific requirements. By default, AWS opens all traffic.
Supported OS
Cortex XSOAR supports server installation on these Linux distributions.
AWS Backup
You can use Amazon EBS snapshots to back up your AWS EC2 instances. Use snapshots for incremental backups, point-in-time restoration, and to view history data.
Azure Virtual Machines Deployment Guidelines
Azure Virtual Machine (VM) deployments have specific technical and sizing requirements and a set of Cortex XSOAR best practices.
After you configure and verify your Azure Virtual Machine, install the Cortex XSOAR Server.
Supported Azure VM sizes
Cortex XSOAR server installation is supported on the following Azure VM sizes.
D-Series v4 - General Purpose
D16as_v4
D48as_v4
D96as_v4
F-Series v2 - Compute-Optimized
F48s_v2
F64s_v2
F72s_v2
H-Series - High Performance Compute
H16
H16m
H16r
L-Series v2
L16s_v2
L48s_v2
L80s_v2
D-Series v3 - General Purpose
D16s_v3
D48s_v3
D64s_v3
Note
The guideline for VM selection is to start with a VM from at least the General Purpose family with a minimum of 16 vCPUs and 64 GB of memory.
Supported Azure managed disk
We recommend that you use a managed disk from the Premium SSD family with a minimum IOPS of 5000+ and minimum disk space of 500 GB.
Network Security
Inbound connections: Cortex XSOAR server requires that you open HTTPS port 443 for inbound connections.
Outbound connections: Outbound ports depend on your integrations and specific requirements. By default, Azure Network Security groups allow all outbound traffic.
Supported OS
Cortex XSOAR supports server installation on these Linux distributions.
Azure Backup
You can use Azure Snapshots to back up your Azure VM and disks. Use snapshots for incremental backups, point-in-time restoration, and to view historical data.
GCP Compute Engine Deployment Guidelines
GCP Compute Engine deployments have specific technical and sizing requirements and a set of Cortex XSOAR best practices.
After you configure and verify your GCP Compute Engine VM, install the Cortex XSOAR Server.
Supported GCP Compute Engine Instance Types
Cortex XSOAR server installation is supported on the following GCP Compute Engine VM types.
E2 - Cost Optimized
e2-standard-16
e2-standard-32
N2 - General Purpose
n2-standard-16
n2-standard-48
n2-standard-80
N1 - High CPU
n2d-standard-16
n1-standard-64
n1-standard-96
N2D - AMD EPYC Rome processors
n2d-standard-16
n2d-standard-48
n2d-standard-96
C2 - Compute Optimized
c2-standard-16
c2-standard-30
c2-standard-60
Note
The guideline for VM selection is to start with a VM from at least the General Purpose family with a minimum of 16 vCPUs and 64 GB of memory.
Supported GCP Storage
We recommend that you use Balanced or SSD Persistent Disks with a minimum IOPS of 5000+ and minimum disk space of 500 GB.
Network Security
Inbound connections: The Cortex XSOAR server requires that you open HTTPS port 443 for inbound connections.
Outbound connections: Outbound ports depend on your integrations and specific requirements. By default, the GCP VPC firewall opens all traffic.
Supported OS
Cortex XSOAR supports server installation on these Linux distributions.
GCP Backup
You can use GCP Persistent Disk Snapshots to back up your GCP Compute Engine VM Disks. Use snapshots for incremental backups, point-in-time restoration, and to view historical data.
Last updated
Was this helpful?