Installing the agent on Debian

This guide explains how to install the Next-Gen WAF agent on Debian.

Prerequisites

Before installing the agent, you need to:

• Determine the version of Debian you want to use.
• Copy the agent keys for the site that you want the agent to be able to access. You will use the agent keys when configuring the Next-Gen WAF agent package.

Add the package repository

Begin the agent installation by adding the version of the Debian package repository that you want to use.

Debian 11 - Bullseye

To add the Debian 11 - Bullseye package, run the following script:

$ sudo apt-get update
$ sudo apt-get install -y apt-transport-https wget gnupg
$ wget -qO - https://apt.signalsciences.net/release/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/sigsci.gpg
$ sudo echo "deb [signed-by=/usr/share/keyrings/sigsci.gpg] https://apt.signalsciences.net/release/debian/ bullseye main" | sudo tee /etc/apt/sources.list.d/sigsci-release.list
$ sudo apt-get update

Debian 10 - Buster

To add the Debian 10 - Buster package, run the following script:

$ sudo apt-get update
$ sudo apt-get install -y apt-transport-https wget gnupg
$ wget -qO - https://apt.signalsciences.net/release/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/sigsci.gpg
$ sudo echo "deb [signed-by=/usr/share/keyrings/sigsci.gpg] https://apt.signalsciences.net/release/debian/ buster main" | sudo tee /etc/apt/sources.list.d/sigsci-release.list
$ sudo apt-get update

Debian 9 - Stretch

To add the Debian 9 - Stretch package, run the following script:

$ sudo apt-get install -y apt-transport-https wget gnupg
$ wget -qO - https://apt.signalsciences.net/release/gpgkey | sudo apt-key add -
$ sudo tee /etc/apt/sources.list.d/sigsci-release.list <<-'EOF'
deb https://apt.signalsciences.net/release/debian/ stretch main
EOF
$ sudo apt-get update

Debian 8 - Jessie

To add the Debian 8 - Jessie package, run the following script:

$ sudo apt-get install -y apt-transport-https wget
$ wget -qO - https://apt.signalsciences.net/release/gpgkey | sudo apt-key add -
$ sudo tee /etc/apt/sources.list.d/sigsci-release.list <<-'EOF'
deb https://apt.signalsciences.net/release/debian/ jessie main
EOF
$ sudo apt-get update

Debian 7 - Wheezy

To add the Debian 7 - Wheezy package, run the following script:

$ sudo apt-get install -y apt-transport-https wget
$ wget -qO - https://apt.signalsciences.net/release/gpgkey | sudo apt-key add -
$ sudo tee /etc/apt/sources.list.d/sigsci-release.list <<-'EOF'
deb https://apt.signalsciences.net/release/debian/ wheezy main
EOF
$ sudo apt-get update

Install and configure the Next-Gen WAF agent package

Now that you've downloaded the Debian package repository, you can install and configure the Next-Gen WAF agent package:

1. Run the following command to install the Next-Gen WAF agent package:

   $ sudo apt-get install sigsci-agent

2. Create an empty agent configuration file in the following directory: /etc/sigsci/agent.conf.
3. Add the agent keys for your site to the agent configuration file.

   accesskeyid = "AGENTACCESSKEYHERE"
   secretaccesskey = "AGENTSECRETACCESSKEYHERE"

4. Save the agent configuration file.

Start the Next-Gen WAF agent

Now that you've installed and configured the agent package, you can start the Next-Gen WAF agent.

For Debian versions 8 and above, run the following command to start the Next-Gen WAF agent:

$ sudo systemctl start sigsci-agent

For Debian 7, run the following command to start the Next-Gen WAF agent:

$ sudo service sigsci-agent start

Optionally, enable the agent auto-update service. On a set schedule, the service checks the package downloads site for a new version of the agent and updates the agent when a new version is available.

Next steps

Explore our module options and install the Next-Gen WAF module.