Install the Server Offline - Install Cortex XSOAR when you do not have internet access. Instructions for offline installation. - Administrator Guide - 6.12 - Cortex XSOAR - Cortex - Security Operations

On a machine with internet access, do the following:

1. Download and install offline the required dependencies for your deployment type.

   1. Run the command #sudo apt-get install --download-only <package name>

      This will download the package and any dependencies it may have to the folder /var/cache/apt/archives.

      If the newest version is already installed, you can download the package by running the command #sudo apt-get download <package name>

      This will download the package to the folder the command is run from.

   2. Copy all .deb files over to the offline machine into a folder.

   3. Install all dependencies offline by running the command #sudo dpkg -i *

   Note

   If you need to download dependencies on Ubuntu, you can also use the command sudo apt-get download.

2. Ensure the Cortex XSOAR installer and license files are downloaded from Cortex Gateway.

3. Download the Docker images by appending downloadName=dockerimages to the download URL you copied from the installer download.

   For example:

   https://download.demisto.com/download-params?token=xxxxxxx email=user@paloaltonetworks.com downloadName=dockerimages eula=accept

   The Docker images file is approximately 75 GB.

4. Verify Docker is installed (it is typically installed with Cortex XSOAR). If it is not, install it. For example, for Ubuntu see Install Docker on Ubuntu without direct internet connection.

On the machine where you want to install Cortex XSOAR offline, do the following:

1. Transfer the dependency files downloaded in step 1.

2. Verify that the required dependencies in step 1 are installed successfully by running one of the following commands.

   • (Red Hat) repoquery -a --installed

   • (Ubuntu) apt list --installed

Install Cortex XSOAR offline by running the following command:

(Red Hat or Ubuntu) sudo ./demisto.sh -- -tools=false -do-not-start-server=true

(Red Hat v8 & above) Install and configure Podman, by following the steps in Migrate From Docker to Podman (from step 2 onwards).

For other OS versions, you need to install Docker.

Upload the Docker images that you downloaded in step 1 by doing one of the following:

Start the server by running the following command:

sudo systemctl start demisto

(Optional) After installation has completed, do the following:

1. Confirm that the Cortex XSOAR server status is active, by running the systemctl status demisto command.

2. (Ubuntu, Red Hat v7 & below) Confirm that the Docker service status is active, by running the systemctl status docker command.

3. In a web browser, go to the https://serverURL:port to verify that Cortex XSOAR was successfully installed.

   When you open Cortex XSOAR for the first time you need to add the license.