Sold by: Check Point Software Technologies
Deployed on AWS
AWS Free Tier
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation.
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
4.5
Overview
Video
Video 1
Video
Product video
CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot.
CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.
This CloudGuard Network Security gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.
This BYOL distributed security gateway is managed from a central Security Management Server, which provides consistent security policy management, enforcement, and reporting across AWS and hybrid deployments within a single pane of glass.
The Security Management Server is not included in this offering. To manage CloudGuard Network Security Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ ).
Highlights
- Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Depending on your existing license, SandBlast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques).
- Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed to meet dynamic security requirements, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment (e.g. using AWS CloudFormation), while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
- Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Please see seller website for refund details.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Resources
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Are you looking for an automated Web Application Firewall (WAF) with precise prevention and no management overheads? CloudGuard WAF delivers AI-enabled Web Application and API protection.
Customer reviews
Program Development
Powerful Multi-Cloud Protection, but Setup and UI Take Time to Master
Reviewed on Feb 16, 2026
Review provided by G2
What do you like best about the product?
What I like best about Check Point CloudGuard Network Security is its comprehensive protection combined with cloud flexibility. It provides multi-layered security that defends against both traditional and advanced cyber threats, including malware, ransomware, and targeted attacks. I also appreciate how it integrates seamlessly with major cloud platforms like AWS, Azure, and Google Cloud, allowing consistent security policies across hybrid and multi-cloud environments. Additionally, the centralized management and automated threat prevention features make it easier to monitor and respond to threats efficiently, saving time while maintaining a high level of security.
What do you dislike about the product?
One thing I dislike about Check Point CloudGuard Network Security is that its initial setup and configuration can be complex, especially for organizations new to cloud security. The platform offers a lot of advanced features, which is great, but it can sometimes feel overwhelming to configure policies correctly without deep expertise. Additionally, while the centralized management is powerful, the user interface could be more intuitive for quick navigation and reporting. Finally, the licensing model can be a bit costly for smaller teams, which might limit adoption despite its strong security capabilities.
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Network Security solves several critical security challenges for organizations operating in cloud environments. It protects against malware, ransomware, phishing, and advanced persistent threats, while providing centralized visibility and control over cloud workloads. It also enforces consistent security policies across hybrid and multi-cloud environments, reducing misconfigurations and human errors. For me, this is highly beneficial because it ensures that my cloud infrastructure is secure without constant manual monitoring, saves time on threat detection and response, and provides confidence that sensitive data and applications are protected against evolving cyber threats.
Arts and Crafts
Modern cloud-based network security solutions.
Reviewed on Feb 13, 2026
Review provided by G2
What do you like best about the product?
I like that it is cloud based which makes it very easy to implement in business environment. Its automation capabilities save a lot of otherwise unnecessary human-work which optimizes the overall working process in the organization. Also the Intrusion Prevention (IPS) capabilities (which are part of the automation process) can tremendously reduce the damage in case of an incident.
What do you dislike about the product?
Just like any cloud based application, it is very susceptible to "outage" in case of coordinated cyberattack against its main machines. Strong security posture should be in place for it to ensure users satisfaction. Pricing could be a little bit lower too.
What problems is the product solving and how is that benefiting you?
It has protected my business from threats by reducing the most common cyber threats (which is network security's main responsibility). Another thing is that since it is cloud based you don't have to manually configure security solutions on every machine you use.
Accounting
Strong Multi-Cloud Security with Advanced Threat Prevention
Reviewed on Feb 12, 2026
Review provided by G2
What do you like best about the product?
Its seamless integration with major cloud platforms, strong threat prevention, and centralized management that simplifies securing multi-cloud environments.
What do you dislike about the product?
Its complex initial setup, steep learning curve, and relatively high cost compared to some competing cloud security solutions.Occasional performance issues and limited built-in reporting features.
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Network Security protects cloud workloads and networks with advanced threat prevention, micro-segmentation, and automation, reducing breaches, simplifying compliance, and improving operational efficiency.
Anish P.
Strong, Reliable Cloud Protection with Real-Time Threat Blocking
Reviewed on Feb 11, 2026
Review provided by G2
What do you like best about the product?
What I like best about the product is its strong and reliable protection for cloud environments without adding complexity. It provides clear visibility into traffic, blocks threats in real time and integrates smoothly with major cloud platforms. The centralized management also makes it easy to apply security policies across different environments which saves a lot of time and effort.
What do you dislike about the product?
What I dislike about the product is that the initial setup and policy tuning can be a bit complex, especially for teams that are new to Check Point. The interface is powerful but sometimes feels overwhelming. Pricing can also be on the higher side compared to some other alternatives.
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Network Security solves the challenge of securing cloud workloads and traffic across hybrid and multi-cloud environments. It delivers real-time threat prevention, clear visibility, and centralized policy management, which reduces security gaps and manual work.
sandip k.
Check point cloud guard network security
Reviewed on Feb 11, 2026
Review provided by G2
What do you like best about the product?
i like best about checkpoint cloud gaurd network security is its strong cloud native security with centeralized management. it has a firewall that makes easy to maintain security of our environment
What do you dislike about the product?
It is very difficult to setup and learning is also quite difficult and license is also expensive, we also facing problem while troubleshooting and also difficult for new users to adapt.
What problems is the product solving and how is that benefiting you?
Check point cloud guard network security helps our company by addresssing challenges to securing the cloud environments. our infrasturcture is accross cloud platform and on premises system.