# CloudGuard WAF Deployment

CloudGuard WAF can be deployed as a single docker containing a managed reverse proxy server and the CloudGuard Security agent.

## Configuration

When creating either Web application or Web API assets:

- **Define the URLs that Users/Clients will access** (1)

- **Define the Application/API URL that will be accessed by the Reverse Proxy** (2)

If you plan to deploy in Azure App Services the URLs should be **http** and not **https**, because Azure is handling the SSL encryption opening by itself. Certificate configuration will be done in Azure (explained later).

- Make sure to select a Docker based profile if creating a new profile to protect the asset (keep the default settings for **Single docker container** and without selecting to manage NGINX yourself):

For deployment in Azure App Services, you can skip the Certificates page in the Wizard above.

## Deployment options

Select the deployment option that best fits your environment and requirements:

- **Manually deploying using the docker command:** [Deployment using 'docker' command](https://waf-doc.inext.checkpoint.com/getting-started/deploy-enforcement-point/docker/single-docker/deployment-using-docker-command)

- **Deployment using Azure App Services:** [Deployment in Azure App Services](https://waf-doc.inext.checkpoint.com/getting-started/deploy-enforcement-point/docker/single-docker/deployment-in-azure-app-services)