You can try out the Workload Security demo application to learn how to add a protected computer and explore the various protection modules:

Procedure

  1. In the Workload Security console, go to Support Deployment Scripts. For more information about deployment scripts, see Use deployment scripts to add and protect computers.
  2. Set the Platform to Linux Agent Deployment and the Security Policy to Base Policy Demo.
  3. Copy the deployment script to your clipboard.
    DeploymentScriptImg=9d896578-e650-4cda-ab62-0628d62f915a.png
  4. Navigate to your AWS console and go to Services Compute EC2.
  5. Select Instances from the side-menu. Click Launch Instance.
    instance-console=79631ffc-4f6c-4152-bd5f-b3b70172d67c.png
  6. Select Ubuntu Server 18.04 from the list.
    ubuntuinstance=9941f401-6117-4fc9-a602-512756a56567.png
  7. In Choose an Instance Type, select t2.micro. Click Next: Configure Instance Details.
    instance-type=f01dec87-0508-4e83-bf0e-1cf6f02e89aa.png
  8. In Configure Instance Details, select a Network and Subnet that have public internet access.
  9. Open the Advanced Details pane and paste the deployment script.
    Instance-details=6e652257-4517-4882-b51f-ddf5a08caa9b.png
  10. Under the deployment script, paste the following command: curl https://raw.githubusercontent.com/deep-security/demo-app/master/demo-app.sh | sudo bash This installs and configures Tomcat.
  11. It is not necessary to add storage or tags, so click through to the Configure Security Group page.
  12. Add an SSH rule and an HTTP rule and set the Source to My IP. This security group is the only thing blocking outside access to your instance until the agent is installed, which is why we highly recommend you only allow access from your IP address.
    security-rules=5e2adcee-0fd5-4700-b2a7-68edc520d755.png
  13. Click Review and Launch.
  14. In the dialog, select Proceed without a key pair. Click Launch Instance.
    key-pair=57377f70-66e6-4587-acd7-73dd3f07b81a.png
  15. Click on the instance ID to navigate to the AWS console. Your instance and demo app will take about five minutes to launch and install. Once the instance is running and all the necessary checks are complete, you are ready to explore the Workload Security console and agent!
  16. To view your new instance, open the Workload Security console and go to Computers. Your new instance should be displayed.
    computers=9e5446c2-f25e-4ed9-8d73-18c502e13a5f.png
  17. To access the demo application, go back to the AWS Instance page, copy your Public DNS and enter the URL into a browser with /demo-app at the end.
  18. Trigger the security module of your choice.
    demo-page=a8c3816c-864b-4b3a-9934-a2be1a7561c7.png
  19. To view the security event, open the Workload Security console, go to Computers and double-click the demo computer.
    demo-computer=b8f4e803-59ae-46a9-be1f-6942bac4b05f.png
  20. In the pop-up window, select the security module that you triggered, then navigate to the Events page of that module.
  21. If the event has not appeared, click Get Events. Double-click the event for more information.
    intrusion-prevention-events=fe2819e3-dd8d-41da-a9c8-e3586571576c.png

What to do next

Now you are ready to add an account of your own. For next steps, see Getting started with Workload Security.