07-07-2026 05:16 AM
Hi everyone,
I am evaluating the integration between Cortex XSOAR 8 (Commercial SaaS / Government Cloud) and Microsoft Sentinel, which is deployed within a GCC High environment. I have the following queries:
1. CONNECTIVITY
I noticed that the Microsoft Sentinel integration in XSOAR provides a "US GCC-High" option under the Azure Cloud dropdown. Can I leverage this to connect Cortex XSOAR 8 (Commercial SaaS / Government Cloud) tenant directly to GCC High Sentinel, without the need to deploy an XSOAR engine? If yes, could you please provide details on:
• Communication flow and architecture
• Protocols and ports used
• Authentication mechanism
2. BEST APPROACH
My current plan is to use the Microsoft Sentinel integration to fetch incidents from Sentinel into XSOAR 8 (Commercial SaaS / Government Cloud). Has anyone implemented this architecture? If so, could you share experience or the recommended approach?
Thank you for your support.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
