>
    Strata Copilot
    Next-Gen Integration Engine Requirements
    Focus
    Download PDF
    Focus
    1. Home
    2. Device Security
    3. Device Security Integration Guide
    4. Next-Gen Integration
    5. Next-Gen Integration Engine Requirements
    Download PDF
    Device Security

    Next-Gen Integration Engine Requirements

    Table of Contents

    Next-Gen Integration Engine Requirements

    Review the hardware, operating system, and network requirements for deploying an on-premises Cortex XSOAR engine, and learn about the available installation types.
    Where Can I Use This?What Do I Need?
    • Device Security (Managed by Strata Cloud Manager)
    One of the following subscriptions:
    • Device Security subscription
    • Precision AI bundle subscription
    • Device Security X subscription
    Next-Gen Integration uses an engine to connect to third-party systems and send information from your network to Device Security. An engine is a lightweight agent that you run on a virtual machine in your network. You can install an engine on Linux machines. When you use the Shell installer, Docker or Podman is installed automatically.

    Engine Hardware Requirements

    If your hard drive is partitioned, we recommend a minimum of 50GB for the /var partition in your development environment, and 50GB for the /var partition in your production environment. If you use RHEL 8.x with Podman, we recommend allocating a minimum of 50GB for the /home partition and 50GB for the /var partition.
    ComponentDev Environment MinimumProduction Minimum
    CPU8 CPU cores16 CPU cores
    Memory16GB RAM32GB RAM
    Storage100GB100GB

    Operating System Requirements

    You can deploy an engine on the following operating systems:
    Operating SystemSupported Versions
    Ubuntu22.04, 24.04
    RHEL
    9.x, 10.x
    Includes all minor versions.

    Engine Required URLs

    You need to allowlist the following URLs on your firewalls for engines to operate properly.
    FunctionServicePortDirection
    IntegrationsIntegration-specific portsOutbound
    Engine connectivityHTTPS443 (configurable)Outbound
    Device SecurityNext-Gen Integration
    HTTPS
    Your URL depends on your region and your tenant ID. Example URL: https://integrations-us.iot.paloaltonetworks.com/123456789
    • integrations-us.iot.paloaltonetworks.com
    • integrations-eu.iot.paloaltonetworks.com
    • integrations-ca.iot.paloaltonetworks.com (Canada)
    • integrations-sg.iot.paloaltonetworks.com (Singapore)
    • integrations-uk.iot.paloaltonetworks.com (UK)
    • integrations-au.iot.paloaltonetworks.com (Australia)
    • integrations-jp.iot.paloaltonetworks.com (Japan)
    • integrations-ch.iot.paloaltonetworks.com (Switzerland)
    		443Inbound and Outbound
    Strata Cloud Manager authentication and API
    HTTPS
    • https://auth.apps.paloaltonetworks.com
    • https://api.strata.paloaltonetworks.com
    		443Inbound and Outbound

    Engine Installation Types

    Before you install an engine, copy the Device Security service URL, which you can find when you Download the installer. The service URL is the external IP address of your Device Security Next-Gen Integration. You need to allowlist the URL in your firewall so that Device Security can communicate with your engine. You also need to allowlist the URL for Strata Cloud Manager.
    Shell Installer
    Use the Shell installer for all Linux deployments. This option automatically installs Docker or Podman, downloads the required images, and enables remote engine upgrade. The installation file is provided by Next-Gen Integration, and Shell installation supports the purge flag, which defaults to false.

    © 2026 Palo Alto Networks, Inc. All rights reserved.