To effectively run Cortex XSOAR, understanding its minimum hardware requirements is crucial, as these vary based on whether the deployment is for a development environment or a full-scale production system.
Cortex XSOAR Hardware Specifications
The hardware requirements for Cortex XSOAR are categorized into development and production environments, reflecting the differing demands for testing versus live operational use. Meeting these specifications ensures optimal performance and stability for your security orchestration, automation, and response operations.
Here's a breakdown of the minimum requirements:
| Component | Dev Environment Minimum | Production Minimum |
|---|---|---|
| CPU | 8 CPU cores | 16 CPU cores |
| Memory | 16GB RAM | 32GB RAM |
| Storage | 500GB SSD | 1TB SSD with minimum 3k dedicated IOPS |
Understanding the Environments
- Development Environment Minimum: These specifications are suitable for testing, development, and non-critical deployments where the load is expected to be light and concurrent users are few. It provides a baseline for familiarization and initial solution building.
- Production Minimum: These requirements are designed for live, operational environments that process a significant volume of incidents, run numerous playbooks concurrently, and support multiple users. The increased resources ensure high availability, performance, and responsiveness under typical security operations workloads. Notably, the Storage requirement for production includes a crucial detail: a minimum of 3k dedicated IOPS (Input/Output Operations Per Second). This metric is vital for database performance and overall system responsiveness, ensuring that data can be read from and written to storage quickly enough to support demanding operations.
Selecting the appropriate environment type and ensuring your infrastructure meets or exceeds these minimums is essential for a stable and efficient Cortex XSOAR deployment.
