Install an Access Tier

Installs and configure the Cloud Secure Edge (CSE) Access Tier in your environment

  • Last validated: Jul 8, 2026

Note: Netagent v2 has been released, simplifying the process of installing and configuring an Access Tier:
1. Use an API key with the access_tier scope for registration
2. All agent configuration is done via the Command Center API and UI

If you need to install Netagent v1, use the legacy v1 guides.

Overview

The Access Tier is an identity-aware proxy that mediates access between entities on the internet and your internal services. Each Access Tier has a public IP address that is reachable from the internet, and each accepts inbound connections on the following ports:

  • TCP 80 and TCP 443 (Hosted Web Services),
  • TCP 8443 (Infrastructure Services),
  • and UDP 51820 (Service Tunnels).

The core of the Access Tier component is the netagent binary - a light-weight, identity-aware proxy, written in Golang. Netagent runs on Linux servers and is designed to be similar in deployment to open-source proxies such as Nginx.

Download

Download the latest Netagent version here.

Supported OSs

The Access Tier supports the following operating systems (see Choose an Installation Method below for the install options):

Operating System Supported Versions
Ubuntu 22.04, 24.04
Oracle Linux 8, 9, 10
RHEL 8, 9, 10
Amazon Linux 2023

Choose an Installation Method

Tarball

Debian Package

Docker

AWS CloudFormation

Terraform

Was this page helpful?