Azure Virtual Machines Deployment Guidelines - Administrator Guide - 6.10 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.10
Creation date
2022-10-13
Last date published
2024-03-28
End_of_Life
EoL
Category
Administrator Guide
Abstract

Technical and sizing requirements for Azure Virtual Machine (VM) Cortex XSOAR deployment. Azure Cortex XSOAR best practices.

Azure Virtual Machine (VM) deployments have specific technical and sizing requirements and a set of Cortex XSOAR best practices.

After you configure and verify your Azure Virtual Machine, install the Cortex XSOAR Server.

Supported Azure VM sizes

Cortex XSOAR server installation is supported on the following Azure VM sizes.

Instance Type

Instance Name

D-Series v4 - General Purpose

D16as_v4

D48as_v4

D96as_v4

F-Series v2 - Compute-Optimized

F48s_v2

F64s_v2

F72s_v2

H-Series - High Performance Compute

H16

H16m

H16r

L-Series v2

L16s_v2

L48s_v2

L80s_v2

D-Series v3 - General Purpose

D16s_v3

D48s_v3

D64s_v3

Note

The guideline for VM selection is to start with a VM from at least the General Purpose family with a minimum of 16 vCPUs and 64 GB of memory.

Supported Azure managed disk

We recommend that you use a managed disk from the Premium SSD family with a minimum IOPS of 5000+ and minimum disk space of 500 GB.

Network Security

Inbound connections: Cortex XSOAR server requires that you open HTTPS port 443 for inbound connections.

Outbound connections: outbound ports depend on your integrations and specific requirements. By default, Azure Network Security groups allow all outbound traffic.

Supported OS

Cortex XSOAR supports server installation on these Linux distributions.

Azure Backup

You can use Azure Snapshots to back up your Azure VM and disks. Use snapshots for incremental backups, point-in-time restoration, and to view historical data.