Skip to content

Latest commit

 

History

History
42 lines (28 loc) · 1.51 KB

README.md

File metadata and controls

42 lines (28 loc) · 1.51 KB

Check Point CloudGuard AppSec demo using Win10/11 WSL and Docker

This is an enhancement to Stuart Green's simple docker-compose environment for deploy a Check Point AppSec embedded nano-agent demo. The enhancement allows for running on Windows WSL and includes an additional Client Host for traffic generations of good and bad traffic.

The deployment includes four containers, an NGINX reverse proxy, an agent-container (the nano-agent), tester host with traffic generators and the OWASP JuiceShop app. This was based off of Stuart Green's work

You will have two ways to access the Juice Store Web Site:

  • Port 80: Protected by AppSec
  • Port 3000: Direct to JuiceShop (unprotected)

Instructions:

  • Clone the repository
  • From a machine with docker and docker-compose installed, run:
source cpalias.sh          << Load Aliase commands
cptoken  cp-us-....token   << Token from Check Point Infinity Portal - AppSec>

cpcert                     << WSL does not provide CA certs - fetches the required to build the Docker Images.
docker-compose down -v --remove-orphans
docker-compose build
source .env
docker-compose up -d

[DEMO HERE]

cphelp - Will show alias command useful for this demo

cptrgood http://juiceshop.local:80 # Use to generate good traffic - This just does a simple crawl of the Juiceshop website

cptrbad http://juiceshop.local:80 # Use to generate questionable traffic on the Juiceshop website

docker-compose down

Notes: