End-of-Life (EoL)

Install Cortex XSOAR Offline

Install Cortex XSOAR when you do not have internet access. Offline installation
Use these instructions when using the Cortex XSOAR installer script for installation with no internet connectivity.
You need to download Cortex XSOAR dependencies and Docker images on a machine that has internet access, and then transfer them to a machine where you want to install Cortex XSOAR. After installing Cortex XSOAR server, install the dependencies and images.
Always verify that your Cortex XSOAR dependencies are updated according to and take into account that they might change across releases.
  • There are different steps for some versions and operating systems versions.
  • Docker/Podman is used to run Python scripts in an isolated container.
  • After installation, you need to Add a License.
  1. On a machine with internet access, do the following:
    1. Download the required dependencies for your deployment type.
      • (
        Red Hat and CentOS
        ) Run the following commands:
        sudo yum check update
        sudo yum install
        <name of the dependency>
        For example,
        sudo yum install
      • (
        Ubuntu and Debian
        ) Run the following commands:
        sudo apt-get update
        sudo apt-get install
        <name of the dependency>
        For example,
        sudo apt-get install systemd
    2. Download the Docker images by appending
      to the download link you received from Cortex XSOAR.
      For example:
      wget -O dockerimages.tar "https://download.demisto.com/download-params?token=xxxxxxx&email=user@paloaltonetworks.com&downloadName=dockerimages&eula=accept"
    3. Download Cortex XSOAR (if not already installed).
      For example:
      wget -O demisto.sh "https://download.demisto.com/download- params?token=xxxxxxx&email=user@paloaltonetworks.com&eula=accept"
  2. On the machine you want to install Cortex XSOAR, do the following:
    1. Transfer the files downloaded in step 1.
    2. Verify that the required dependencies in step 1 are installed successfully by running one of the following commands.
      • (
        Red Hat or CentOS
        repoquery -a --installed
      • (
        Ubuntu or Debian
        apt list --installed
  3. Install Cortex XSOAR, by running one of the following commands:
    • (
      sudo ./demisto.sh -- -tools=false -do-not-start-server=true -C
    • (
      Red Hat, Ubuntu, or Debian
      sudo ./demisto.sh -- -tools=false -do-not-start-server=true
  4. (
    Red Hat v8 & above or CentOS v8 & above
    ) Install and configure Podman, by following the steps in Migrate From Docker to Podman (from step 2 onwards).
  5. Load the Docker images that you downloaded in step 1.2, by doing one of the following:
    • (
      Ubuntu, Debian, Red Hat v7 & below, or CentOS v7 & below
      ) Run the following command:
      sudo docker load -i <YOUR_DOCKER_FILE>.tar
    • (
      Red Hat v8 & above, or CentOS v8 & above
      ) Do the following:
      1. Ensure that the docker file has
      2. Ensure that you are in the root directory (
        cd /
      3. Run the following commands:
        sudo -su demisto
        podman load -i <YOUR_DOCKER_FILE>.tar
      4. (
        ) To verify that images are able to run, use the
        podman images
        command. You can also run the
        podman images -q "demisto/python:1.3-alpine"
        command to validate specific images and identify any issues.
  6. Start the server, by running the following command:
    sudo systemctl start demisto
  7. (
    ) After installation has completed, do the following:
    1. Confirm that the Cortex XSOAR server status is active, by running the
      systemctl status demisto
    2. (
      Ubuntu, Debian, Red Hat v7 & below, or CentOS v7 & below
      ) Confirm that the Docker service status is active, by running the
      systemctl status docker
    3. In a web browser, go to the
      https:// serverURL: port
      to verify that Cortex XSOAR was successfully installed.
      When you open Cortex XSOAR for the first time you need to add the license.

Troubleshoot Offline Installation

If you receive the following message, ensure you use a version of Podman that supports archives with multiple images.
Error: error pulling "": unable to pull dir:./xsoar_docker_images.tar: error determining pull goal for image "dir:./xsoar_docker_images.tar": error parsing dest reference name "localhost/./xsoar_docker_images.tar": error parsing named reference "localhost/./xsoar_docker_images.tar": invalid reference format

Recommended For You