checkpoint/cloudguard-appsec-standalone repository overview

To Install an NGINX with Check Point Nano-Agent as a single standalone container it is recommended to follow <a href = https://appsec-doc.inext.checkpoint.com/getting-started/deploy-enforcement-point/docker/single-docker>our⁠ online documentation. A brief list of the main deployment path's action items:

1. Add the cloudguard-appsec-standalone container image to the deployment CI's applicable container management system.
2. Navigate to <a href=https://portal.checkpoint.com>Infinity⁠ Portal > Policy Application, browse to the Cloud > Profiles page.

• Obtain the agent token from your profile object.
• If you do not wish to manage reverse proxy settings from the UI make sure to select "I want to manage NGINX myself" checkbox. In the deployment command below make sure to add:
  --nginx-self-managed
• Otherwise, make sure all assets defined using this profile are configured with an upstream URL in their Reverse Proxy settings section.

1. Run the agent with this command (several parameters are options as listed below the command:
   docker run -d --name=agent-container -v=<path to persistent location for agent config>:/etc/cp/conf -v=<path to persistent location for agent data files>:/etc/cp/data -v=<path to persistent location for agent debugs and logs>:/var/log/nano_agent -v=<path to persistent location for nginx server conf files>:/etc/nginx/conf.d/ -e https_proxy=<user:password@Proxy address:port> -it checkpoint/cloudguard-appsec-standalone /cloudguard-appsec-standalone --token <token>

• When managing the reverse proxy from CloudGuard AppSec management the following parameters are optional: -e https_proxy, and all -v parameters
• When managing the reverse proxy locally, the same parameters are optional except -v=<path to persistent location for nginx server conf files>:/etc/nginx/conf.d/

1. Run the execution command for the container and make sure that it is running, use docker ps.
2. Navigate to the Infinity Portal > Policy Application, browse to the Cloud > Agents page and make sure that the new Agent is added.