1. Home
Location
    Techdocs Logo Techdocs Logo
    • Documentation Home
    • Palo Alto Networks
    • Support
    • Live Community
    • Knowledge Base
    1. Home
    2. Security Operations
    3. Cortex XSOAR
    4. Cortex XSOAR Multi-Tenant Guide
    PDF Cover Image
    Download PDF
    Last Updated:
    Mon Jun 13 22:43:25 PDT 2022
    Current Version:
    6.2 (EoL)
    • Version 6.9
    • Version 6.8
    • Version 6.6
    • Version 6.5
    • Version 6.2 (EoL)
    • Version 6.1 (EoL)
    • Version 6.0 (EoL)
    • Version 5.5 (EoL)
    End-of-Life (EoL)

    Table of Contents


    Search the Table of Contents
    Multi-Tenant Deployments
    Multi-Tenant Overview
    Multi-Tenant High Availability Overview
    Plan Your Multi-Tenant Deployment
    Multi-Tenant Sizing Requirements
    Configure Security Settings for Multi-Tenant Deployments
    SAML for Multi-Tenant Deployments
    Communication in a Multi-Tenant Deployment
    Change the Port for Host to Main Communication
    Install Cortex XSOAR for a Multi-Tenant Deployment
    Install Cortex XSOAR for a Multi-Tenant Deployment
    Installer Flags
    Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch
    Upgrade Your Multi-Tenant Deployment
    Get the Host Installer Manually
    Configure the Multi-Tenant Deployment
    Main Account to Tenant Communication Encryption
    Add a Host
    Add a Tenant to a Host
    Delete a Host
    Configure Live Backup
    Configure the HTTP Request Timeout
    Configure the Account Timeout
    Forward Server Configurations to Tenant Accounts
    Run a Command on Multiple Tenants
    Move a Tenant to a Different Host
    Stop and Start a Tenant
    Block and Unblock a Tenant
    Reindex a Tenant Database
    Back Up a Tenant
    Restore a Tenant Database
    Restore a Partition for a Tenant
    Index War Room Entries in a Multi-Tenant Deployment
    Install Engines on Tenants in a Multi-Tenant Deployment
    Manage Content
    Manage Content Overview
    Add Propagation Labels to an Existing Tenant Account
    Add Propagation Labels to Content
    Add Propagation Labels in Remote Repositories
    Content Dependencies and Propagation
    Sync Content to Tenant Accounts
    Troubleshoot Errors When Syncing All Accounts
    Disable Propagation Labels
    Restrict Actions for Custom Locked Content Items
    Share Indicators
    Share Indicators Overview
    Export Indicators to the Shared Index
    Configure Tenants to Ingest Shared Indicators
    Ingest Indicators from the Shared Indicators Index
    Share Indicators with Tenants Using Propagation Labels
    Remote Repositories for Multi-Tenant Deployments
    Remote Repositories Overview
    Configure a Remote Repository on a Development Machine
    Configure a Remote Repository on the Main Account
    Edit and Push Content to a Remote Repository
    Troubleshoot a Remote Repository Configuration
    Troubleshoot a Remote Repository Definition
    Troubleshoot Editing and Pushing Content
    Troubleshoot Content Issues
    • Multi-Tenant Deployments
      • Multi-Tenant Overview
      • Multi-Tenant High Availability Overview
    • Plan Your Multi-Tenant Deployment
      • Multi-Tenant Sizing Requirements
      • Configure Security Settings for Multi-Tenant Deployments
      • SAML for Multi-Tenant Deployments
      • Communication in a Multi-Tenant Deployment
      • Change the Port for Host to Main Communication
    • Install Cortex XSOAR for a Multi-Tenant Deployment
      • Install Cortex XSOAR for a Multi-Tenant Deployment
        • Installer Flags
      • Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch
      • Upgrade Your Multi-Tenant Deployment
      • Get the Host Installer Manually
    • Configure the Multi-Tenant Deployment
      • Main Account to Tenant Communication Encryption
      • Add a Host
      • Add a Tenant to a Host
      • Delete a Host
      • Configure Live Backup
      • Configure the HTTP Request Timeout
      • Configure the Account Timeout
      • Forward Server Configurations to Tenant Accounts
      • Run a Command on Multiple Tenants
      • Move a Tenant to a Different Host
      • Stop and Start a Tenant
      • Block and Unblock a Tenant
      • Reindex a Tenant Database
      • Back Up a Tenant
      • Restore a Tenant Database
      • Restore a Partition for a Tenant
      • Index War Room Entries in a Multi-Tenant Deployment
      • Install Engines on Tenants in a Multi-Tenant Deployment
    • Manage Content
      • Manage Content Overview
      • Add Propagation Labels to an Existing Tenant Account
      • Add Propagation Labels to Content
      • Add Propagation Labels in Remote Repositories
      • Content Dependencies and Propagation
      • Sync Content to Tenant Accounts
        • Troubleshoot Errors When Syncing All Accounts
      • Disable Propagation Labels
      • Restrict Actions for Custom Locked Content Items
    • Share Indicators
      • Share Indicators Overview
      • Export Indicators to the Shared Index
      • Configure Tenants to Ingest Shared Indicators
        • Ingest Indicators from the Shared Indicators Index
        • Share Indicators with Tenants Using Propagation Labels
    • Remote Repositories for Multi-Tenant Deployments
      • Remote Repositories Overview
      • Configure a Remote Repository on a Development Machine
      • Configure a Remote Repository on the Main Account
      • Edit and Push Content to a Remote Repository
      • Troubleshoot a Remote Repository Configuration
        • Troubleshoot a Remote Repository Definition
        • Troubleshoot Editing and Pushing Content
        • Troubleshoot Content Issues

    Cortex XSOAR Multi-Tenant Guide


    Version 6.2 (EoL)

    PDF Cover Image
    Download PDF
    Last Updated:
    Mon Jun 13 22:43:25 PDT 2022
    Current Version:
    6.2 (EoL)
    • Version 6.9
    • Version 6.8
    • Version 6.6
    • Version 6.5
    • Version 6.2 (EoL)
    • Version 6.1 (EoL)
    • Version 6.0 (EoL)
    • Version 5.5 (EoL)

    Table of Contents


    Search the Table of Contents
    Multi-Tenant Deployments
    Multi-Tenant Overview
    Multi-Tenant High Availability Overview
    Plan Your Multi-Tenant Deployment
    Multi-Tenant Sizing Requirements
    Configure Security Settings for Multi-Tenant Deployments
    SAML for Multi-Tenant Deployments
    Communication in a Multi-Tenant Deployment
    Change the Port for Host to Main Communication
    Install Cortex XSOAR for a Multi-Tenant Deployment
    Install Cortex XSOAR for a Multi-Tenant Deployment
    Installer Flags
    Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch
    Upgrade Your Multi-Tenant Deployment
    Get the Host Installer Manually
    Configure the Multi-Tenant Deployment
    Main Account to Tenant Communication Encryption
    Add a Host
    Add a Tenant to a Host
    Delete a Host
    Configure Live Backup
    Configure the HTTP Request Timeout
    Configure the Account Timeout
    Forward Server Configurations to Tenant Accounts
    Run a Command on Multiple Tenants
    Move a Tenant to a Different Host
    Stop and Start a Tenant
    Block and Unblock a Tenant
    Reindex a Tenant Database
    Back Up a Tenant
    Restore a Tenant Database
    Restore a Partition for a Tenant
    Index War Room Entries in a Multi-Tenant Deployment
    Install Engines on Tenants in a Multi-Tenant Deployment
    Manage Content
    Manage Content Overview
    Add Propagation Labels to an Existing Tenant Account
    Add Propagation Labels to Content
    Add Propagation Labels in Remote Repositories
    Content Dependencies and Propagation
    Sync Content to Tenant Accounts
    Troubleshoot Errors When Syncing All Accounts
    Disable Propagation Labels
    Restrict Actions for Custom Locked Content Items
    Share Indicators
    Share Indicators Overview
    Export Indicators to the Shared Index
    Configure Tenants to Ingest Shared Indicators
    Ingest Indicators from the Shared Indicators Index
    Share Indicators with Tenants Using Propagation Labels
    Remote Repositories for Multi-Tenant Deployments
    Remote Repositories Overview
    Configure a Remote Repository on a Development Machine
    Configure a Remote Repository on the Main Account
    Edit and Push Content to a Remote Repository
    Troubleshoot a Remote Repository Configuration
    Troubleshoot a Remote Repository Definition
    Troubleshoot Editing and Pushing Content
    Troubleshoot Content Issues
    • Multi-Tenant Deployments
      • Multi-Tenant Overview
      • Multi-Tenant High Availability Overview
    • Plan Your Multi-Tenant Deployment
      • Multi-Tenant Sizing Requirements
      • Configure Security Settings for Multi-Tenant Deployments
      • SAML for Multi-Tenant Deployments
      • Communication in a Multi-Tenant Deployment
      • Change the Port for Host to Main Communication
    • Install Cortex XSOAR for a Multi-Tenant Deployment
      • Install Cortex XSOAR for a Multi-Tenant Deployment
        • Installer Flags
      • Install Cortex XSOAR for a Multi-Tenant Deployment with Elasticsearch
      • Upgrade Your Multi-Tenant Deployment
      • Get the Host Installer Manually
    • Configure the Multi-Tenant Deployment
      • Main Account to Tenant Communication Encryption
      • Add a Host
      • Add a Tenant to a Host
      • Delete a Host
      • Configure Live Backup
      • Configure the HTTP Request Timeout
      • Configure the Account Timeout
      • Forward Server Configurations to Tenant Accounts
      • Run a Command on Multiple Tenants
      • Move a Tenant to a Different Host
      • Stop and Start a Tenant
      • Block and Unblock a Tenant
      • Reindex a Tenant Database
      • Back Up a Tenant
      • Restore a Tenant Database
      • Restore a Partition for a Tenant
      • Index War Room Entries in a Multi-Tenant Deployment
      • Install Engines on Tenants in a Multi-Tenant Deployment
    • Manage Content
      • Manage Content Overview
      • Add Propagation Labels to an Existing Tenant Account
      • Add Propagation Labels to Content
      • Add Propagation Labels in Remote Repositories
      • Content Dependencies and Propagation
      • Sync Content to Tenant Accounts
        • Troubleshoot Errors When Syncing All Accounts
      • Disable Propagation Labels
      • Restrict Actions for Custom Locked Content Items
    • Share Indicators
      • Share Indicators Overview
      • Export Indicators to the Shared Index
      • Configure Tenants to Ingest Shared Indicators
        • Ingest Indicators from the Shared Indicators Index
        • Share Indicators with Tenants Using Propagation Labels
    • Remote Repositories for Multi-Tenant Deployments
      • Remote Repositories Overview
      • Configure a Remote Repository on a Development Machine
      • Configure a Remote Repository on the Main Account
      • Edit and Push Content to a Remote Repository
      • Troubleshoot a Remote Repository Configuration
        • Troubleshoot a Remote Repository Definition
        • Troubleshoot Editing and Pushing Content
        • Troubleshoot Content Issues
    End-of-Life (EoL)

    Cortex XSOAR multi-tenant deployments are designed for MSSPs and Enterprises that require strict data segregation between tenant accounts and the flexibility to easily share critical security data to those tenant accounts, such as known malicious/benign indicators.

    What's New?

    System Diagnostics

    You can view System Diagnostics for hosts from the main account and view information about CPU, storage, and memory usage for each tenant account on a host.

    Select a custom port for host to main communications

    You can now specify the port for host to main communications by adding the host.communication.port a server configuration.

    Run a command across multiple tenants

    When viewing incidents from the main account, you can run a command across multiple incidents located on multiple tenants.

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo