Requirements

To set up Stormshield XDR, you will need:

  • The scenario package available on MyStormshield,

  • Compatible versions of Stormshield: SNS, SES and SLS (SMC as an option).

Number of playbooks activated per day Number of cores on the CPU Memory capacity Disk space
Up to 100 4 2 GB 200 GB
More than 100 MB 5 32 GB 275 GB

For more information on what playbooks are, refer to the section Configuring playbooks.

Package scenarios

The scenario package is a .zip archive containing version release notes and the files that make it possible to set up the XDR scenarios covered. Scenarios make it possible to detect and respond to threats.

Packages are named according to the naming system below:

alert.xdr.X.Y.Z-YYMMa.zip

This naming system provides a variety of information, in particular the compatibility of the version:

X.Y.Z Lowest SLS version required to use this package
YYMM Year (2 digits) and month (2 digits) in which the package was published
a Version of the package in the month (“a” for the first version of this package in the month, then “b”, “c”, and so on)

EXAMPLE
alert.xdr.2.0.0-2409a.zip is an archive containing scenarios that are compatible with SLS v2.0.0 and which were set up in September 2024.

  1. Log in to your MyStormshield personal area.

  2. Go to Downloads > Downloads, and select Stormshield Log Supervisor > Resources.

  3. Download the latest XDR scenario package available (XDR Scenarios vYYMM).

Compatible versions of Stormshield

Look up the release notes provided in the scenario package to find out which versions are compatible.

For information on installation, refer to the SNS presentation and installation guide.

For updates, refer to the release notes of the version that you wish to install:

If you have several firewalls, you can opt for SMC to manage your firewalls from a central point.

For information on installing SMC, refer to the SMC installation guide.

For instructions on connecting SNS firewalls, refer to the section Connecting SNS firewalls to the SMC server in the SMC administration guide.

For information on updates, refer to the section Updating the SMC server in the SMC administration guide.

For more information, refer to the SES Evolution installation guide.

For installations, refer to the SLS deployment guide that corresponds to your hypervisor:

For updates, refer to the SLS update guide.