XSOAR muti-site (DC,DR) design best practice

Showing results for 
Show  only  | Search instead for 
Did you mean: 

XSOAR muti-site (DC,DR) design best practice

L0 Member

Dears All,

Kindly we need your support to provide us with best practices for muti-site high availability architecture (DC, DR)


L4 Transporter


Have you ever checked our documentation on this topic? I am sharing this below. 


L4 Transporter

There is no best practice for multi-site HA when using Cortex XSOAR.   You can setup XSOAR to be highly available within the context of a single data center, or a single cloud region.  Multi-DC or multi-Region are not supported.   


XSOAR HA - https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.11/Cortex-XSOAR-Administrator-Guide/High-A...


For Disaster Recovery when using HA with Elastic, you use elastic snapshots to restore data to a different cluster, and can switch to that cluster in the event of total loss of the original cluster, and rebuild your XSOAR app servers to use it. 




If you're not using HA with Elastic, then you can use the Live Backup feature which is basically an Active/Passive setup with 2 servers:



In lieu of Live Backup, regular snapshots of your server are a good alternative as well. 

  • 2 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!