Sold by: Check Point Software Technologies
Deployed on AWS
AWS Free Tier
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation.
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
4.5
Overview
Video
Video 1
Video
Product video
Check Point Check Point Cloud Firewall is a cloud-native security gateway that delivers industry-leading threat prevention and multi-layered network security for workloads migrated to or deployed in AWS environments.
Comprehensive Cloud Network Security: Check Point Cloud Firewall for AWS protects cloud assets with a full suite of advanced security capabilities, including: firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, anti-bot, threat extraction, and threat emulations. These features enable proactive defense against known and unknown threats, ensuring robust protection for cloud workloads.
Industry-Leading Threat Prevention: Check Point Cloud Firewall for AWS provides advanced threat prevention to secure AWS environments from sophisticated threats, unapproved access, and application-layer Denial of Service (DoS) attacks with industry-leading catch rates (Miercom 2025 and Cyberratings 2025).
Full Control of Network Traffic: Check Point Cloud Firewall for AWS ensures secure, encrypted data flows between your on-premises network and your AWS VPCs. It inspects traffic entering and exiting private subnets in the VPC ("North-South") as well as between VPCs ("East-West").
Unified Security Management: Extend on-premises security policies into the AWS cloud with unified, centralized management via Check Point Security Management Server. Manage policies, logs, and reports consistently across AWS, hybrid, and on-premises environments from a single pane of glass. This listing includes the gateway only. For management, use Check Point Smart-1 Cloud: https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/
Automated, Scalable Cloud Security: Integrates with infrastructure-as-code tools like Terraform and Ansible for policy automation and cloud-native scaling. CloudGuard dynamically adapts security policies based on real-time cloud metadata and changes. Supports AWS Transit Gateway, auto-scaling, high availability, and multi-AZ redundancy.
Seamless AWS Integration: Check Point Cloud Firewall integrates with a broad range of AWS services, including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.
This Check Point Cloud Firewall gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc. This BYOL-distributed security gateway is managed from a central Security Management Server, which provides consistent security policy management, enforcement, and reporting across AWS and hybrid deployments within a single pane of glass. The Security Management Server is not included in this offering. To manage Check Point Cloud Firewall Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ ).
Highlights
- Advanced Protection with Security Features: firewall, DLP, IPS, application control, IPsec VPN, URL Filtering, antivirus, anti-bot, threat extraction, and threat emulation. Includes Security Management Server.
- Industry-Leading Threat Prevention: Cutting-edge threat prevention with industry-leading catch rate of malware, ransomware and other types of attacks (per Miercom and Cyberratings, 2025).
- Unified Security Management: Provides consistent visibility, policy management, logging, reporting and control across hybrid-clouds and on-premises from a single pane of glass.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Please see seller website for refund details.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
A single pane-of-glass security management console delivers consistent visibility, policy management, logging, reporting and control across all cloud environments and networks
Check Point Check Point Cloud Firewall is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
A single security management console delivers consistent visibility, policy management, logging, reporting and control across all cloud environments and networks
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Customer reviews
Rayaan A.
Comprehensive Traffic Control with a Learning Curve
Reviewed on May 05, 2026
Review provided by G2
What do you like best about the product?
I like how easy it is to manage all our network rules in one place instead of juggling different tools. It also gives clear visibility into traffic, which makes it much easier to spot and fix issues quickly. Having everything in one place saves a lot of time. Instead of jumping between different cloud tools, we can update rules, review logs, and troubleshoot issues from a single dashboard, which makes day to day work much smoother.
What do you dislike about the product?
Some parts feel more complicated than they need to be, especially when setting up or fine-tuning policies. It can take a bit of trial and error to get everything working the way we want. Policy setup can feel a bit layered, especially when you are trying to understand how different rules interact. It would help if there were clearer guidance or examples built into the workflow, so you don't have to rely as much on documentation or trial and error.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to control network traffic in our cloud environment. It simplifies managing rules across tools, catches unusual activity early, and provides a single dashboard for smoother operations.
Rishi T.
Reliable and User-Friendly Security with Minor Setup Hurdles
Reviewed on Apr 30, 2026
Review provided by G2
What do you like best about the product?
I like Check Point CloudGuard Network Security because it's easy to use and effectively keeps my network safe from threats. It works fast and doesn't slow down my work. I really appreciate how I can manage everything from one place and see what's happening on my network in real time. The automatic blocking of threats without needing much intervention from me saves a lot of time.
What do you dislike about the product?
What doesn't work as well for me is that sometimes it takes a bit of time to set up new rules when I need to make changes quickly. Also, the reports could be simpler to understand. Those are the main things I'd like to see improved.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to protect my network and data from cyberattacks, stopping hackers and malware. It blocks bad traffic, keeps my information safe, and allows me to work without worry.
vinit s.
Unified Management and Strong Threat Protection in a User-Friendly Experience
Reviewed on Apr 26, 2026
Review provided by G2
What do you like best about the product?
Enhanced unified management, strong security, and high-level threat protection help administrators manage the entire network more effectively. Overall, it feels more user-friendly.
What do you dislike about the product?
As a first-time user, I’ve found Checkpoint Security Guard can be difficult to manage at times. The console feels complex, mainly because there are so many features available within the management console.
What problems is the product solving and how is that benefiting you?
Check Point network security feels like a strong safeguard against fragmentation because it offers a unified security management console. It has also helped me mitigate zero-day vulnerabilities, which makes day-to-day security management feel more consistent and controlled.
Vishnukumar M.
Well-Designed Posture Management and Upgraded IAM in Check Point Next Guard
Reviewed on Apr 26, 2026
Review provided by G2
What do you like best about the product?
Check Point Next Guard’s posture management settings are well designed and useful for effective administration. The identity and access management features have also been upgraded in the required way.
What do you dislike about the product?
Checkpoint Security Guard can be difficult to manage at times for a first-time user, since the console feels more complex due to the many features available in the management console.
What problems is the product solving and how is that benefiting you?
Checkpoint network security feels more like a guard against fragmentation because it provides a unified security management console. It has also helped mitigate zero-day vulnerabilities.
Oil & Energy
Check Point CloudGuard provides resilient cloud security with easy administration
Reviewed on Apr 21, 2026
Review provided by G2
What do you like best about the product?
Cloud environments require even more resilient network security protection than on-prem datacenters. Check Point CloudGuard offers prevention from advanced threats and easiness in administration
What do you dislike about the product?
Additional cost is incurred when running third party firewall in the cloud, but Check Point CloudGuard offers reliable protection from the Internet based threats
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard adds additional layer of protection to existing cloud security features, provides constant updates and wonderful single pane administrative interface