topic HTTPS with a Signed Certificate in Cortex XSOAR Discussions

HTTPS with a Signed Certificate

DP696 — Tue, 06 Sep 2022 06:42:28 GMT

Hi,

As per the below link, XSOAR on-perm services by default use self-signed certificates for secure HTTP connections. It would be great if you confirmed this would be applicable for the hosted service as well.

https://docs.paloaltonetworks.com/cortex/cortex-xsoar/6-5/cortex-xsoar-admin/high-availability/use-a-signed-certificate#:~:text=By%20default%20Cortex%20XSOAR%20servers%20use%20a%20self%2Dsigned%20certificate%20for%20a%20secure%20HTTP%20connection.

Also, please confirm what TLS version is used for the XSOAR hosted service.

Thanks in advance.

Re: HTTPS with a Signed Certificate

Ivetto — Wed, 28 Dec 2022 20:55:23 GMT

Getting some extra help on this question as I am not sure. I'll respond back once I hear something.

Re: HTTPS with a Signed Certificate

jfernandes1 — Thu, 29 Dec 2022 07:04:44 GMT

Hi @DP696, hosted services do not use self signed certificates. Certificates are provided by AWS. The specific TLS version is either 1.1 or 1.2.

All the service information can be found here. https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.10/Cortex-XSOAR-Hosted-Service-Guide/Security-and-Compliance