Plan and prepare - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Documentation

Cortex XSIAM
Creation date
Last date published
Administrator Guide

Learn more about deployment considerations and onboarding steps.

Prepare for deployment

Before you get started with Cortex XSIAM, consider the following:

  • Determine the amount of log storage you need for your Cortex XSIAM deployment. Talk to your partner or sales representative to determine whether you must purchase additional storage within the Cortex XSIAM tenant.

  • Determine the region in which you want to host Cortex XSIAM and any associated services, such as Directory Sync Service. If you plan to stream data from a Strata Logging Service instance, it must be in the same region as Cortex XSIAM. For more information, see Cortex XSIAM supported regions.

  • For the Cortex XDR Pro per Endpoint license, determine the necessary bandwidth required to support the number of agents you plan to deploy. Allocate 1.2Mbps of bandwidth for every 1,000 agents. This requirement scales proportionally. For example, if you plan to have 100,000 agents, you will need to allocate 120Mbps of bandwidth.