NGINX

Prerequisites

• An existing deployment of NGINX for Linux running over a variety of platforms.

• Specific versions numbers are updated under Support->Platforms

Installation

For deployment instructions follow steps in the Profile

Step 1: Download the Installer to the linux machine

Run the following commands from the linux server shell:

sudo su

wget https://sc1.checkpoint.com/nanoagent/nanoegg -O nanoegg

Step 2: Install the Agent

Run the following commands from the linux server shell, from the same location as previous step:

chmod +x nanoegg

./nanoegg --install --token <token>

Make sure you obtain the <token> from the Enforcement Profile page, Authentication section. you will need it during agent deployment.

The installer creates an initial registration with the CloudGuard WAF cloud and downloads the latest version of the agent installation.

It will also add to your nginx.conf the following line:

load_module /usr/lib/nginx/modules/ngx_cp_attachment_module.so;

Step 3: Configure SSL certificates (optional if the servers do not use HTTPS)

To configure SSL certificates in NGINX follow these guides:

• NGINX

• NGINX PLUS

To configure SSL certificates in Kong follow the guide in the following link.

Step 4: Verify installation

The agent will automatically install, connect and should display a successful connection message within the CloudGuard WAF web portal:

To check agent status after the installation from the Linux server shell, you can run:

cpnano -s