Sold by: Check Point Software Technologies
Deployed on AWS
Free Trial
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
4.4
Overview
Video
Video 1
Video
Product video
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers industry-leading threat prevention and multi-layered network security for workloads migrated to or deployed in AWS environments.
Comprehensive Cloud Network Security: CloudGuard Network Security for AWS protects cloud assets with a full suite of advanced security capabilities, including: firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, and anti-bot. These features enable proactive defense against known and unknown threats, ensuring robust protection for cloud workloads.
Industry-Leading Threat Prevention: CloudGuard Network Security for AWS provides advanced threat prevention to secure AWS environments from sophisticated threats, unapproved access, and application-layer Denial of Service (DoS) attacks with industry-leading catch rates.
Full Control of Network Traffic: CloudGuard Network Security for AWS ensures secure, encrypted data flows between your on-premises network and your AWS VPCs. It inspects traffic entering and exiting private subnets in the VPC ("North-South") as well as between VPCs ("East-West").
Unified Security Management: Extend on-premises security policies into the AWS cloud with unified, centralized management via Check Point CloudGuard Security Management Server. Manage policies, logs, and reports consistently across AWS, hybrid, and on-premises environments from a single pane of glass. This listing includes the gateway only. For management, use Check Point Smart-1 Cloud: https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/
Automated, Scalable Cloud Security: Integrates with infrastructure-as-code tools like Terraform and Ansible for policy automation and cloud-native scaling. CloudGuard dynamically adapts security policies based on real-time cloud metadata and changes. Supports AWS Transit Gateway, auto-scaling, high availability, and multi-AZ redundancy.
Flexible Licensing and Seamless AWS Integration: Deploy within minutes as either a single gateway, as a high availability cluster, or as an auto scaling group via Check Point CloudFormation templates (sk111013). Recommended deployment on a 4 vCPU instance for optimal performance. CloudGuard Network Security integrates with a broad range of AWS services, including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.
Getting Started: Supports both Pay-As-You-Go (PAYG) and Bring Your Own License (BYOL) models with a flexible pricing model that supports both usage-based billing and contract-based subscriptions. Start your free 30-day trial to gain full access to CloudGuards features and capabilities. At the end of the trial, your subscription will automatically convert to a paid, usage-based plan, unless canceled beforehand. Request a private offer for custom pricing and terms. For a guided walkthrough, you may request a product demo through this listing.
Highlights
- Advanced Protection with Security Features: Firewall, DLP, IPS, Application Control, IPsec VPN, URL Filtering, Antivirus and Anti-Bot.
- Industry-Leading Threat Prevention: Cutting-edge threat prevention with industry-leading catch rate of malware, ransomware and other types of attacks (per Miercom and Cyberratings, 2025).
- Unified Security Management: Provides consistent visibility, policy management, logging, reporting and control across hybrid-clouds and on-premises from a single pane of glass.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $0.96 |
r5a.2xlarge | $1.58 |
c7a.12xlarge | $9.23 |
c7i-flex.16xlarge | $12.08 |
m6a.large | $0.84 |
c5n.4xlarge | $3.15 |
m6a.8xlarge | $6.16 |
c6in.8xlarge | $6.16 |
c6in.large | $0.84 |
r7a.4xlarge | $3.15 |
Vendor refund policy
Terminate the instance at any given time to stop incurring charges.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Palo Alto Networks
Top
10
In Log Analysis, Network Infrastructure
Top
10
In Network Infrastructure
Top
10
In Network Infrastructure, Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Advanced Threat Prevention Capabilities
Firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, and anti-bot protection against known and unknown threats.
Network Traffic Inspection and Control
Inspects and secures encrypted data flows between on-premises networks and AWS VPCs, including North-South traffic entering and exiting private subnets and East-West traffic between VPCs.
Unified Security Management
Centralized management via Check Point CloudGuard Security Management Server enabling consistent policy, log, and report management across AWS, hybrid, and on-premises environments.
Infrastructure-as-Code Integration
Integrates with Terraform and Ansible for policy automation and cloud-native scaling with dynamic adaptation of security policies based on real-time cloud metadata.
AWS Service Integration
Supports Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie with deployment options including auto-scaling groups and multi-AZ redundancy.
Intrusion Prevention System
Intrusion prevention (IPS) capabilities to detect and block malicious network traffic and attacks.
Data Leak Prevention
Data Leak Prevention (DLP) functionality to prevent unauthorized data exfiltration and breaches.
Geo-IP Blocking
Geo-specific policy enforcement that blocks traffic to and from specified countries based on geographic location.
AI-Powered Threat Intelligence
Advanced filtering powered by AI-driven threat intelligence from FortiGuard Labs to identify and block risky connections.
Dynamic Policy Management
Dynamic security policies that use cloud metadata tags to automatically follow cloud workloads without requiring static IP updates.
Advanced Threat Prevention
Safeguards network from known and zero-day threats including exploits, malware, spyware, and command and control attacks using researcher-grade signatures and machine learning inspection engine.
Advanced URL Filtering
Defends against phishing, ransomware, and web-based attacks using inline machine learning-based web security engine with real-time detection of previously unseen threats and dynamic policy controls.
File-Based Threat Detection
Identifies file-based threats through inline static and dynamic analysis in the cloud with proprietary hypervisor technology for detection of sandbox-resistant malware.
DNS Security
Detects and prevents sophisticated DNS-layer network attacks and data exfiltration attempts.
Dynamic Policy Management
Applies policy definitions to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones with automatic adaptation to infrastructure changes without manual intervention.
Standard contract
No
No
No
Customer reviews
Michele M.
Enterprise-Grade Cloud Security That Just Works
Reviewed on Mar 09, 2026
Review provided by G2
What do you like best about the product?
When we started using Check Point CloudGuard Network Security, what struck me right away was how quickly we got solid, enterprise‑level protection without having to tear apart our existing cloud setup. Everything was up and running smoothly, and it just worked.
What I like most is that it brings together firewalling, intrusion prevention, and advanced threat protection all in one place. Whether we’re dealing with workloads in the cloud or on‑prem, the policies stay consistent and easy to manage. The management console also deserves a mention cause it’s super clear and having everything visible from one dashboard really saves time day to day.
Also, the auto scaling feature is really good, It automatically keeps up so the security layer never becomes a bottleneck, and, to be honest, It just runs in the background catching issues and anomalies.
What I like most is that it brings together firewalling, intrusion prevention, and advanced threat protection all in one place. Whether we’re dealing with workloads in the cloud or on‑prem, the policies stay consistent and easy to manage. The management console also deserves a mention cause it’s super clear and having everything visible from one dashboard really saves time day to day.
Also, the auto scaling feature is really good, It automatically keeps up so the security layer never becomes a bottleneck, and, to be honest, It just runs in the background catching issues and anomalies.
What do you dislike about the product?
The main thing of Check Point CloudGuard Network Security is that is not very beginner-friendly. If you think about smaller teams or people who don't have any previous experience. The initial setup can feel complex and requires some time to fully understand the different things like routing options or blades.
All this things compared to the pricing, that is definitely on the higher side compared to some cloud-native alternatives, so It's an investment that needs to be justified by a serious security requirement.
All this things compared to the pricing, that is definitely on the higher side compared to some cloud-native alternatives, so It's an investment that needs to be justified by a serious security requirement.
What problems is the product solving and how is that benefiting you?
The main problem that CloudGuard resolved was the challenge of applying consistent, advanced network security across a multi cloud env. Before that, each platform had its own security tools and policies which made it easy for misconfigurations and blinds spots to appear. Automated threat prevention like zero day attacks, ransomware and phishing reduces the volume of real incidents and noisy false positives. Overall, Cloud Guard has clearly reduced our risk level and given us much more confidence that our critical applications and data are not protected.
Computer Networking
Heard It Works Well, but Still Looking for More Firsthand Value
Reviewed on Mar 06, 2026
Review provided by G2
What do you like best about the product?
I have heard that it works well and that clients are satisfied with its usage. People like that it has the AI buzzword, and checkpoint seem to have good customer support.
What do you dislike about the product?
It is expensive for what it is, and the company has a bad reputation for trustworthiness among public sector I have spoken to. It would be hard to recommend based on these things.
What problems is the product solving and how is that benefiting you?
It integrates into AWS infrastructure well and has customer support to make customers feel at ease. People tend to go in wanting checkpoint, so they get given what they ask for.
Dharamveer p.
Centralized Cloud Security, But Prepare for a Steep Learning Curve
Reviewed on Feb 21, 2026
Review provided by G2
What do you like best about the product?
I really like the threat prevention accuracy and how Check Point CloudGuard Network Security handles files using Content Disarm and Reconstruction. It makes me feel secure knowing that malicious code is stripped from documents and reconstructed safely before reaching users. I also appreciate the single pane of glass management, which allows me to oversee our entire security posture across multiple clouds without constantly switching contexts. It works dependably in the background and doesn't generate a lot of false positives, reducing the time my team spends on manual investigations. The integration with cloud-native tools is smooth and gives me a clear sense of control over our network traffic.
What do you dislike about the product?
While the platform is very powerful, the initial setup and policy tuning can be quite complex, especially for teams that are not already deeply familiar with the Check Point ecosystem. The learning curve is steep, and getting the configuration exactly right for a specific cloud environment takes a significant amount of time and planning. I have also noticed that the user interface can feel a bit dated and sometimes lags when I am trying to load large dashboards or complex reports, which can be frustrating during urgent tasks. Additionally, the licensing and pricing models are somewhat opaque and expensive, making it a bit difficult to map out costs as our environment scales. I would also like to see more intuitive logging tools, as the current built-in reporting can feel clunky, often requiring me to export data just to perform a clear analysis.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to centrally manage security across clouds like AWS and Azure, automating virtual network protection and preventing lateral threats. It consolidates security efforts, reduces error risk, and improves traffic visibility, streamlining our chaotic manual workflows into predictable management.
Prasanth K.
Cloud Guard: A One-Stop, Continuously Updated Security Solution
Reviewed on Feb 20, 2026
Review provided by G2
What do you like best about the product?
Cloud Guard is one stop shop for all security related aspects of the webapplication or networking bit.
Best part is that CloudGuard keep updates the rules or security protocols and configurations regularly that enhances the security and reduces the blast radius significantly.
Manual configuration or tuning required to be very minimal. And its dashboarding features across different layers makes everyones life easy.
Best part is that CloudGuard keep updates the rules or security protocols and configurations regularly that enhances the security and reduces the blast radius significantly.
Manual configuration or tuning required to be very minimal. And its dashboarding features across different layers makes everyones life easy.
What do you dislike about the product?
Initial configuration and integrating with your organisation EDN will be rigid and somewhat tedious process initially.
For beginners it would really take quite some time to root through all the options it has considering its powerful nature across security aspects.
For beginners it would really take quite some time to root through all the options it has considering its powerful nature across security aspects.
What problems is the product solving and how is that benefiting you?
Its integration with majority of clouds.
Dashboards at different layers like WAF, network, CISP,CDR< workload protection makes it ideal choice for most projects.
Manual effort in securing or monitoring is really less when compared to regular products.
Dashboards at different layers like WAF, network, CISP,CDR< workload protection makes it ideal choice for most projects.
Manual effort in securing or monitoring is really less when compared to regular products.
Tulika R.
Enterprise-Grade Cloud Security with Great Visibility and Seamless Integration
Reviewed on Feb 18, 2026
Review provided by G2
What do you like best about the product?
What I like best about Check Point CloudGuard Network Security is that it gives strong, enterprise grade security across cloud environments without making things complicated. It provides advanced threat prevention, consistent security policies across hybrid and multi cloud setups, and very good visibility. I also like that it integrates well with existing infrastructure which makes it practical for real world deployments
What do you dislike about the product?
The learning curve can be slightly steep at the beginning but that’s because it offers deep security features and flexibility and provides very strong protection and visibility across cloud environments
What problems is the product solving and how is that benefiting you?
CloudGuard provides centralized management, strong threat prevention, and real time visibility which reduces security gaps and improves compliance. for me, it benefits by making security management more streamlined and reliable