Support and Maintenance - Hosted Service Guide - 6.9 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Hosted Service Guide

Cortex XSOAR
Creation date
Last date published
Hosted Service Guide

Cortex XSOAR targets a 99.9% service availability which equals unplanned downtime of up to 43.83 minutes per month or up to 8.77 hours per year. The current availability status, notifications, and scheduled maintenance can be viewed at


If the service limits for incident ingestion or monthly partition data are exceeded, Palo Alto Networks cannot guarantee the SLA.

The Cortex XSOAR hosted service operates under the Palo Alto Networks business continuity policy (BCP) (PDF), defined as 4HR/4HR RPO/RTO.

Customers are notified prior to planned maintenance or expected outages and are updated when the maintenance is complete. You can also opt in to Get Notifications About Hosted Instance Availability via email.

Under the Standard plan, technical support is available via the Customer Support Portal. With the Premium plan, technical support is also available by phone 24 hours per day, 7 days per week.

For server outages on the production environment, customers should open a request via a support ticket.






Service is down, critically affects Customer production environment. No workaround available yet.

≤ 2 hours

≤ 1 hour


Service is impaired, Customer production up, but impacted. No workaround available yet.

≤ 4 hours

≤ 2 hours


A Service function has failed, Customer production not affected. Support is aware of the issue and a workaround is available.

≤ 12 hours

≤ 4hours


Non-critical issue. Does not impact Customer business. Server configurations, information, documentation, and how-to requests from Customer. Requests for new features and enhancements should be submitted through the Aha site.

≤ 48 hours

≤ 8 hours

Critical server patches and critical operating system updates are applied when available. Non-critical server patches and operating system updates, defined as those that don’t affect production instances, are applied when software is upgraded.

Non-critical Cortex XSOAR application upgrades are installed on an on-demand basis. Customers submit support tickets to request application upgrades. Separate requests are required to upgrade the development and production environments. Customers must provide at least 24 hours advance notice prior to the upgrade date. Non-critical upgrades are performed Monday - Thursday.

Application upgrades and other support requests may require planned system downtime, coordinated with the customer.

Get Notifications About Hosted Instance Availability

Opt in to the notification service to get email alerts about hosted instance availability, which includes alerts about unexpected downtime and then follow-up alerts when the service is back up.

  1. Log in to your Cortex XSOAR instance and go to SettingsABOUTTroubleshooting.

  2. In the Server Configuration section click Add Server Configuration.

  3. Enter the following key and value:




    A comma-separated list of email addresses who will receive notifications.

  4. Click Save and verify that the new server configuration has been added by refreshing the page.


    It may take up to an hour after adding the server configuration before you begin receiving relevant email notifications.