Onboarding in Cortex XSOAR - Administrator Guide - 6.11 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.11
Creation date
2022-12-12
Last date published
2024-04-15
Category
Administrator Guide
Abstract

Onboarding process for Cortex XSOAR.

After you have familiarized yourself with Cortex XSOAR concepts, you should start the onboarding process.

Tip

For tips and how-to videos, go to the LiveCommunity Customer Journey. Also see the Deployment Checklist - Best Practices.

This section describes how to get and and running with Cortex XSOAR:

  • Installing the server: View the system requirements, install the server including Elasticsearch, install offline, upgrade and uninstall.

  • Proxy: Follow the procedure in this section if you need a proxy for Cortex XSOAR.

  • Elasticsearch: View the Elasticsearch requirements and how to set up Elasticsearch including migration.

  • Docker: Although Docker is installed with Cortex XSOAR for most operating systems, you may need to manually install Docker. You can also manage Docker images and view and apply Docker hardening.

  • Podman: For some operating systems, Podman is installed with Cortex XSOAR, but you may need to manually install Podman.

  • High Availability: Intended to keep your systems running even if one of the components in the system fails.

  • Disaster Recovery and Live Backup: Enables you to mirror your production server to a backup server. In a disaster recovery situation, you can easily convert your backup server to be the production server.

  • Users and Roles: Manage users and roles, setup a password policy, authenticate with SAML 2.0 and with Active Directory.

  • Marketplace: Manage content through content packs.

  • Remote Repositories in Cortex XSOAR: Configure a remote repository on a development and production machine and push content to a remote repository.