GCP Compute Engine Deployment Guidelines - Administrator Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-28
Last date published
2024-03-21
End_of_Life
EoL
Category
Administrator Guide
Abstract

Technical and sizing requirements for GCP compute engine Cortex XSOAR deployment, including GCP Cortex XSOAR best practices, instance types, storage, and security.

GCP Compute Engine deployments have specific technical and sizing requirements and a set of Cortex XSOAR best practices.

After you configure and verify your GCP Compute Engine VM, install the Cortex XSOAR Server.

Supported GCP Compute Engine Instance Types

Cortex XSOAR server installation is supported on the following GCP Compute Engine VM types.

VM Type

VM Name

E2 - Cost Optimized

e2-standard-16

e2-standard-32

N2 - General Purpose

n2-standard-16

n2-standard-48

n2-standard-80

N1 - High CPU

n2d-standard-16

n1-standard-64

n1-standard-96

N2D - AMD EPYC Rome processors

n2d-standard-16

n2d-standard-48

n2d-standard-96

C2 - Compute Optimized

c2-standard-16

c2-standard-30

c2-standard-60

Note

The guideline for VM selection is to start with a VM from at least the General Purpose family with a minimum of 16 vCPUs and 64 GB of memory.

Supported GCP Storage

We recommend that you use Balanced or SSD Persistent Disks with a minimum IOPS of 5000+ and minimum disk space of 500 GB.

Network Security

Inbound connections: The Cortex XSOAR server requires that you open HTTPS port 443 for inbound connections.

Outbound connections: outbound ports depend on your integrations and specific requirements. By default, the GCP VPC firewall opens all traffic.

Supported OS

Cortex XSOAR supports server installation on these Linux distributions.

GCP Backup

You can use GCP Persistent Disk Snapshots to back up your GCP Compute Engine VM Disks. Use snapshots for incremental backups, point-in-time restoration, and to view historical data.