Install the Server Offline - Administrator Guide - 6.10 - Cortex XSOAR - Cortex - Security Operations

On a machine with internet access, do the following:

1. Download the required dependencies for your deployment type.

   • (Red Hat) Run the following commands:

     sudo yum check update

     sudo yum install <name of the dependency>

     For example, sudo yum install systemd

   • (Ubuntu) Run the following commands:

     sudo apt-get update

     sudo apt-get install <name of the dependency>

     For example, sudo apt-get install systemd

   Note

   If you need to download dependencies on Ubuntu, you can also use the command apt-get download.

2. Download the Docker images by appending downloadName=dockerimages to the download link you received from Cortex XSOAR.

   For example:

   wget -O dockerimages.tar "https://download.demisto.com/download-params?token=xxxxxxx&email=user@paloaltonetworks.com&downloadName=dockerimages&eula=accept"

   Note

   The Docker images file is approximately 75 GB.

   If using Podman:

   • To archive a single Docker image, run:

     podman save -o docker_images.tar <docker-image-1> <docker-image-2>

   • To archive multiple Docker images, run:

     podman save --multi-image-archive -o docker_images.tar <docker-image-1> <docker-image-2>

3. Download Cortex XSOAR (if not already installed).

   Note

   When you receive a link to download, ensure that the downloadLink link refers to https://download.demisto.com and not https://download.demisto.works.

   For example, wget -O demisto.sh “https://download.demisto.com/download-params?token=xabcedef&email=user@paloaltonetworks.com&eula=accept”

   To download the latest vendor affirmed FIPS version, append &downloadName=fips. For example, wget -O demisto.sh “https://download.demisto.com/download-params?token=xabcedef&email=user@paloaltonetworks.com&eula=accept&downloadName=fips”

On the machine where you want to install Cortex XSOAR, do the following:

1. Transfer the files downloaded in step 1.

2. Verify that the required dependencies in step 1 are installed successfully by running one of the following commands.

   • (Red Hat) repoquery -a --installed

   • (Ubuntu) apt list --installed

Install Cortex XSOAR, by running the following command:

(Red Hat or Ubuntu) sudo ./demisto.sh -- -tools=false -do-not-start-server=true

(Red Hat v8 & above) Install and configure Podman, by following the steps in Migrate From Docker to Podman (from step 2 onwards).

For other OS versions, you need to install Docker.

Load the Docker images that you downloaded in step 1, by doing one of the following:

Start the server, by running the following command:

sudo systemctl start demisto

(Optional) After installation has completed, do the following:

1. Confirm that the Cortex XSOAR server status is active, by running the systemctl status demisto command.

2. (Ubuntu, Red Hat v7 & below) Confirm that the Docker service status is active, by running the systemctl status docker command.

3. In a web browser, go to the https://serverURL:port to verify that Cortex XSOAR was successfully installed.

   When you open Cortex XSOAR for the first time you need to add the license.