Verify that your Cortex XSOAR deployment meets the minimum system requirements.
Cortex XSOAR requires the following software and hardware. Ensure you meet all minimum system requirements.
A WebSocket communications protocol is used in Cortex XSOAR for bi-directional data transfer between the client browser and the server. Verify that the Websocket protocol is allowed on your network, including for proxies.
Linux kernel 5.2 and specific later versions include a bug that may cause XSOAR to panic on x64 platforms due to corrupted memory. Therefore, make sure if XSOAR is running on kernel version 5.3 and later, one of the following fixed kernel versions is used:
- 5.3.15 and later
- 5.4.2 and later
- 5.5 and later
You can identify your kernel version by running the
Cortex XSOAR Server
Cortex XSOAR server has specific operating system and hardware requirements.
It is recommended that you use a dedicated server to run Cortex XSOAR and not run additional programs or software on the machine. If you run additional programs on the machine, performance will be affected.
You can deploy Cortex XSOAR on the following operating systems and must meet the minimum hardware requirements:
Centos 8 End-of-Life - Dec 31, 2021
16.04, 18.04, 20.04
Ubuntu 16.04 End-of-Life - April 30, 2021
Dev Environment Minimum
8 CPU cores
16 CPU cores
1TB SSD with minimum 3k dedicated IOPS
If your hard drive is partitioned, we recommend a minimum of 450GB for the /var partition for the development environment, and 900GB for the /var partition for the production environment.
When deploying Cortex XSOAR with BoltDB, we recommend a limit of 1 million indicators for the development environment and 5-7 million indicators for the production environment. If you will have more indicators, we recommend using Elasticsearch.
You may need to take additional steps depending on your operating system.
Podman, by default, uses the
$HOME/.local/share/containers/storagedirectory, and we recommend reserving 100GB for the /home partition.
Manually Install Docker.
RHEL v7 or CentOS v7 and below
You need Mirantis Container Runtime (formerly Docker Engine - Enterprise) or Red Hat's Docker distribution to run specific Docker-dependent integrations and automations. For more information see Install Docker Distribution for Red Hat on Cortex XSOAR.
RHEL v8 or CentOS v8
Run the following commands before Cortex XSOAR or engine installation:
Cortex XSOAR supports the following web browsers:
46.x and later
6.x and later
43.x and later
You need to allow the following URLs for Cortex XSOAR to operate properly.
Inbound on Docker URLs
Inbound on Marketplace server or GCP buckets
Recommended For You
Recommended videos not found.