CloudGuard IaaS for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus, Anti-Bot, and Data Loss Prevention. SandBlast provides Threat Extraction and Threat Emulation.

CloudGuard IaaS enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management.
CloudGuard IaaS includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.

The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency.
The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.

This offering will be deployed as a single "All-In-One" CloudGuard IaaS gateway and Security Management Server via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.

This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.

The Security Management Server is included in this "All-In-One" offering; there is no need to choose one of the CloudGuard IaaS Security Management offerings.