Installation - Administrator Guide - 8.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR On-prem Documentation

Product
Cortex XSOAR
Version
8.5
Creation date
2024-03-10
Last date published
2024-09-17
Category
Administrator Guide
Solution
On-prem
Abstract

Download the image files from the Cortex Gateway and then install Cortex XSOAR on your machine.

Install Cortex XSOAR by downloading and deploying an image to one or more virtual machines and then setting up and installing Cortex XSOAR on the virtual machines.

Deploy an image

Cortex XSOAR supports the following image files, which you download from the Cortex Gateway:

You can deploy the image on your platform as a single node (standalone) or a cluster of three or more nodes, where each node is a dedicated virtual machine (VM).

After you deploy and log into your virtual machine, a textual UI menu is displayed enabling you to configure IP settings, proxy, and trust between all notes in a cluster and then to install Cortex XSOAR.

Set up and install standalone

Installing on a standalone node involves:

  • Setting up one VM.

  • From the textual UI Cluster Installation menu, install the cluster from one node, including setting the IP address of the node.

Set up and install a cluster

Installing on a cluster involves:

  • Set up multiple VMs.

  • From the textual UI:

    • In the Connect Nodes menu, connect the VMs (establishing trust between all nodes in the cluster).

    • In the Cluster Installation menu, select one node to install the cluster from, including setting the IP addresses of each node.

Note

When deciding how many nodes to deploy, consider the following:

  • Currently, if you deploy a single node (standalone), you can't switch to a cluster of three or more nodes.

  • If you deploy a cluster of three or more nodes, coming soon you can implement out-of-the-box high availability (HA) by replicating data between the nodes in the cluster.