View the hardware requirements when installing Cortex XSOAR On-prem.
The Cortex XSOAR tenant has specific minimum VM hardware requirements depending on the scale.
Important
A hypervisor host running VMs must have enough hardware resources to support all Cortex XSOAR VMs you plan to run on.
Each VM (node) in a cluster must have the same resources. For example, a 3 VM cluster planned to run on a host must have at least 3 times the listed specs for memory, CPU cores, and storage. Leave additional space for overhead virtualization operations.
To fully leverage High Availability, deploy each VM on a different hypervisor. This ensures that the other VMs continue to operate if one hypervisor fails.
The following requirements apply for a single node (standalone), or for each node in a cluster.
Component | Small scale | Medium scale | Large scale |
|---|---|---|---|
CPU per VM | 16 CPU cores | 32 CPU cores | 48 CPU cores |
Memory per VM | 64 GB RAM | 128 GB RAM | 192 GB RAM |
Storage per VM | 256 GB boot disk plus a separate 775 GB data disk. These disks must be SSDs. | 256 GB boot disk plus a separate 1.3 TB data disk (1 TB = 1024 GB). These disks must be SSDs. | 256 GB boot disk plus a separate 1.8 TB data disk (1 TB = 1024 GB). These disks must be SSDs. |
Performance benchmark running the Phishing playbook NoteThe performance benchmark indicates how many playbook runs per hour can be supported. The benchmark values provided are for a single node running the Phishing playbook. This value can vary according to playbook size and complexity. | Up to 200 playbook runs per hour | 200 - 400 playbook runs per hour | Up to 650 playbook runs per hour |
*1 TB = 1024 GB