Sold by: Check Point Software Technologies
Deployed on AWS
AWS Free Tier
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation.
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
4.5
Overview
Video
Video 1
Video
Product video
CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot.
CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.
This CloudGuard Network Security gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.
This BYOL distributed security gateway is managed from a central Security Management Server, which provides consistent security policy management, enforcement, and reporting across AWS and hybrid deployments within a single pane of glass.
The Security Management Server is not included in this offering. To manage CloudGuard Network Security Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ ).
Highlights
- Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Depending on your existing license, SandBlast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques).
- Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed to meet dynamic security requirements, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment (e.g. using AWS CloudFormation), while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
- Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Please see seller website for refund details.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Resources
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Are you looking for an automated Web Application Firewall (WAF) with precise prevention and no management overheads? CloudGuard WAF delivers AI-enabled Web Application and API protection.
Customer reviews
Oil & Energy
Clean UI, Seamless Multi-Cloud Security, and Strong AI-Driven Threat Prevention
Reviewed on Mar 20, 2026
Review provided by G2
What do you like best about the product?
What I like best about Check Point CloudGuard Network Security is how it brings together strong security with a well-rounded user experience across multiple areas. Its UI/UX is clean and intuitive, making it easier to manage complex policies without a steep learning curve, while its integrations with major cloud platforms like AWS, Azure, and GCP ensure seamless deployment in multi-cloud environments. Performance is reliable and scalable, adapting to changing workloads without creating bottlenecks. From a pricing and ROI perspective, it delivers solid value by consolidating multiple security functions into a single platform, reducing overall operational costs. The support and onboarding experience is also strong, with helpful documentation and guidance that make implementation smoother. Finally, its AI-driven intelligence and threat prevention capabilities stand out, leveraging advanced analytics and real-time threat intelligence to proactively identify and stop sophisticated attacks.
What do you dislike about the product?
What I dislike about Check Point CloudGuard Network Security is that, while powerful, it can feel complex in certain areas. The UI/UX, although functional, can sometimes be overwhelming for new users due to the number of features and configuration options. Integrations are strong overall, but initial setup in multi-cloud environments can be time-consuming and may require specialized knowledge. In terms of performance, there can be occasional latency or overhead depending on how it’s configured, especially in high-throughput environments. From a pricing and ROI perspective, it can be on the expensive side compared to some competitors, particularly for smaller organizations. Support and onboarding are generally good, but response times and the depth of assistance can vary depending on the support tier. Lastly, while its AI and intelligence capabilities are robust, they can sometimes generate false positives, requiring additional tuning to avoid unnecessary alerts.
What problems is the product solving and how is that benefiting you?
Before using Check Point CloudGuard Network Security, we struggled with managing security consistently across multiple cloud environments, which led to fragmented policies, limited visibility, and increased risk of misconfigurations. It was difficult to keep up with evolving threats while also ensuring performance and compliance, and a lot of time was spent manually monitoring and adjusting security rules.
After implementing CloudGuard, we were able to centralize security management across all our cloud platforms, automate policy enforcement, and gain much deeper visibility into network traffic and potential threats. We struggled with inconsistent security and slow response times, but now we can detect and respond to threats in real time, which has significantly improved our overall security posture and reduced risk exposure.
As a result, we’ve seen clear benefits: security management time has been reduced by around 30–40%, incident response times have improved by up to 50%, and the consolidation of tools has helped lower overall operational costs. Additionally, automated scaling and smarter threat prevention have reduced downtime and minimized the impact of potential attacks, allowing the team to focus more on strategic work rather than constant firefighting.
After implementing CloudGuard, we were able to centralize security management across all our cloud platforms, automate policy enforcement, and gain much deeper visibility into network traffic and potential threats. We struggled with inconsistent security and slow response times, but now we can detect and respond to threats in real time, which has significantly improved our overall security posture and reduced risk exposure.
As a result, we’ve seen clear benefits: security management time has been reduced by around 30–40%, incident response times have improved by up to 50%, and the consolidation of tools has helped lower overall operational costs. Additionally, automated scaling and smarter threat prevention have reduced downtime and minimized the impact of potential attacks, allowing the team to focus more on strategic work rather than constant firefighting.
Computer & Network Security
AI-Powered Runtime Threat Detection That Blocks Advanced Attacks
Reviewed on Mar 17, 2026
Review provided by G2
What do you like best about the product?
It detects advanced threats in runtime and blocks them. It is AI based and also contains IDS in it whicg triggers alert when any malious user tries to intrude.
What do you dislike about the product?
I Feel its deployment is bit complex. It takes time for a beginner to understand its features and functions.
I somewhat feel it is bit time consuming when it comes to troubleshoot any issue.
I somewhat feel it is bit time consuming when it comes to troubleshoot any issue.
What problems is the product solving and how is that benefiting you?
As I said it detects advanced runtime threats in early stage. It is helping us to stay secure ensuring us to stay compliant.
Main thing it is helped us alot in securing our organization's security posture.
Main thing it is helped us alot in securing our organization's security posture.
Akshay G.
Strong Zero-Day Protection and Better Traffic Visibility, with Cloud Scaling Automation
Reviewed on Mar 13, 2026
Review provided by G2
What do you like best about the product?
Checkpoint CloudGuard Network Security is a good product. It has helped us to protect against Zero Day attack. we were in search for a cloud scaling and automation tool which was fulfilled by Checkpoint CloudGuard network Security. Earlier we were not able to inspect the traffic about where our actual traffic was going but due this application the requirement was fulfilled. Also, the customer support responded quickly for the query we raised
What do you dislike about the product?
The architecture is complex because during implementation we found out that the complex architecture was becoming a hurdle for us. OEM should introduce more documents so that the architecture should be easily understandable.
What problems is the product solving and how is that benefiting you?
Checkpoint Cloudguard Network Security allows us to view where our traffic is and where the traffic is going.
I would strongly recommend my vendors to use this product as this has solved many issues of mine.
I would strongly recommend my vendors to use this product as this has solved many issues of mine.
Aditya V.
Best level Product in Market to have Enterprise Security for Cloud Environment
Reviewed on Mar 11, 2026
Review provided by G2
What do you like best about the product?
Check Point CloudGuard Network Security is having enterprise level support to all the cloud services like AWS GCP and Azure, which helped us to save more on security posture
What do you dislike about the product?
The initial deployment takes some time, but Checkpoint AI helped us make the rollout smoother. Still, it needs a smoother interface with a more modern look. Overall, I’ve never been disappointed.
What problems is the product solving and how is that benefiting you?
CLoudGuard help us to reduce the risk of security incidents and ensures that sensitive systems and data remain protected. Global security attacks with zero trust solved major problem
Michele M.
Enterprise-Grade Cloud Security That Just Works
Reviewed on Mar 09, 2026
Review provided by G2
What do you like best about the product?
When we started using Check Point CloudGuard Network Security, what struck me right away was how quickly we got solid, enterprise‑level protection without having to tear apart our existing cloud setup. Everything was up and running smoothly, and it just worked.
What I like most is that it brings together firewalling, intrusion prevention, and advanced threat protection all in one place. Whether we’re dealing with workloads in the cloud or on‑prem, the policies stay consistent and easy to manage. The management console also deserves a mention cause it’s super clear and having everything visible from one dashboard really saves time day to day.
Also, the auto scaling feature is really good, It automatically keeps up so the security layer never becomes a bottleneck, and, to be honest, It just runs in the background catching issues and anomalies.
What I like most is that it brings together firewalling, intrusion prevention, and advanced threat protection all in one place. Whether we’re dealing with workloads in the cloud or on‑prem, the policies stay consistent and easy to manage. The management console also deserves a mention cause it’s super clear and having everything visible from one dashboard really saves time day to day.
Also, the auto scaling feature is really good, It automatically keeps up so the security layer never becomes a bottleneck, and, to be honest, It just runs in the background catching issues and anomalies.
What do you dislike about the product?
The main thing of Check Point CloudGuard Network Security is that is not very beginner-friendly. If you think about smaller teams or people who don't have any previous experience. The initial setup can feel complex and requires some time to fully understand the different things like routing options or blades.
All this things compared to the pricing, that is definitely on the higher side compared to some cloud-native alternatives, so It's an investment that needs to be justified by a serious security requirement.
All this things compared to the pricing, that is definitely on the higher side compared to some cloud-native alternatives, so It's an investment that needs to be justified by a serious security requirement.
What problems is the product solving and how is that benefiting you?
The main problem that CloudGuard resolved was the challenge of applying consistent, advanced network security across a multi cloud env. Before that, each platform had its own security tools and policies which made it easy for misconfigurations and blinds spots to appear. Automated threat prevention like zero day attacks, ransomware and phishing reduces the volume of real incidents and noisy false positives. Overall, Cloud Guard has clearly reduced our risk level and given us much more confidence that our critical applications and data are not protected.