Sold by: Check Point Software TechnologiesÂ
Deployed on AWS
Free Trial
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
Overview
Video
Video 1
Video
Product video
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers industry-leading threat prevention and multi-layered network security for workloads migrated to or deployed in AWS environments.
Comprehensive Cloud Network Security: CloudGuard Network Security for AWS protects cloud assets with a full suite of advanced security capabilities, including: firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, anti-Bot, threat emulation, and threat extraction. These features enable proactive defense against known and unknown threats, ensuring robust protection for cloud workloads.
Industry-Leading Threat Prevention: CloudGuard Network Security for AWS provides advanced threat prevention to secure AWS environments from sophisticated threats, unapproved access, and application-layer Denial of Service (DoS) attacks with industry-leading catch rates.
Full Control of Network Traffic: CloudGuard Network Security for AWS ensures secure, encrypted data flows between your on-premises network and your AWS VPCs. It inspects traffic entering and exiting private subnets in the VPC ("North-South") as well as between VPCs ("East-West").
Unified Security Management: Extend on-premises security policies into the AWS cloud with unified, centralized management via Check Point CloudGuard Security Management Server. Manage policies, logs, and reports consistently across AWS, hybrid, and on-premises environments from a single pane of glass. This listing includes the gateway only. For management, use Check Point Smart-1 Cloud: https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/Â
Automated, Scalable Cloud Security: Integrates with infrastructure-as-code tools like Terraform and Ansible for policy automation and cloud-native scaling. CloudGuard dynamically adapts security policies based on real-time cloud metadata and changes. Supports AWS Transit Gateway, auto-scaling, high availability, and multi-AZ redundancy.
Flexible Licensing and Seamless AWS Integration: Deploy within minutes as either a single gateway, as a high availability cluster, or as an auto scaling group via Check Point CloudFormation templates (sk111013). Recommended deployment on a 4 vCPU instance for optimal performance. CloudGuard Network Security integrates with a broad range of AWS services, including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.
Getting Started: Supports both Pay-As-You-Go (PAYG) and Bring Your Own License (BYOL) models with a flexible pricing model that supports both usage-based billing and contract-based subscriptions. Start your free 30-day trial to gain full access to CloudGuards features and capabilities. At the end of the trial, your subscription will automatically convert to a paid, usage-based plan, unless canceled beforehand. Request a private offer for custom pricing and terms. For a guided walkthrough, you may request a product demo through this listing.
Highlights
- Advanced Protection with Security Features: Firewall, DLP, IPS, Application Control, IPsec VPN, URL Filtering, Antivirus, Anti-Bot, Threat Emulation and Threat Extraction.
- Industry-Leading Threat Prevention: Cutting-edge threat prevention with industry-leading catch rate of malware, ransomware and other types of attacks (per Miercom and Cyberratings, 2025).
- Unified Security Management: Provides consistent visibility, policy management, logging, reporting and control across hybrid-clouds and on-premises from a single pane of glass.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $0.91 |
m6i.8xlarge | $5.86 |
r6i.12xlarge | $8.79 |
m6i.large | $0.80 |
r6i.2xlarge | $1.50 |
r6i.xlarge | $0.91 |
r5b.large | $0.80 |
r5.4xlarge | $3.00 |
r5b.8xlarge | $5.86 |
r5.12xlarge | $8.79 |
Vendor refund policy
Terminate the instance at any given time to stop incurring charges.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/Â
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Palo Alto Networks
Top
10
In Log Analysis, Network Infrastructure
Top
10
In Network Infrastructure
Top
10
In Network Infrastructure, Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Network Traffic Inspection
Inspects traffic entering and exiting private subnets in VPC ("North-South") and between VPCs ("East-West")
Advanced Threat Prevention
Provides multi-layered security capabilities including firewall, IPS, threat emulation, and threat extraction with advanced catch rates
Cloud Infrastructure Integration
Supports infrastructure-as-code tools like Terraform and Ansible, dynamically adapts security policies based on cloud metadata
Security Protocol Coverage
Comprehensive security features including Data Loss Prevention, application control, IPsec VPN, URL filtering, antivirus, and anti-Bot protection
Cloud Service Compatibility
Integrates with AWS services including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, and AWS Transit Gateway
Network Traffic Protection
Advanced cloud-native firewall service powered by FortiOS and FortiGuard Labs threat intelligence for securing cloud network traffic
Threat Intelligence
AI-powered intrusion prevention (IPS), data leak prevention (DLP), and advanced filtering capabilities to block malicious traffic and potential security breaches
Dynamic Policy Management
Security policies that dynamically use cloud metadata tags to follow cloud workloads without requiring static IP updates
Geo-Specific Security Control
Enforcement of compliance policies through geo-IP blocking and traffic restrictions to/from specified countries
Multi-Account Security Aggregation
Capability to consolidate security across multiple VPCs and accounts within an AWS region using a single firewall instance
Threat Prevention
Advanced machine learning-powered inspection engine that detects known and zero-day threats including exploits, malware, spyware, and command and control attacks
Web Security
Inline machine learning-based web security engine for real-time detection of phishing, ransomware, and evasive web-based attacks
File Analysis
Proprietary cloud-based hypervisor for static and dynamic file-based threat detection using advanced sandbox analysis techniques
Protocol Layer Security
Comprehensive security coverage across network layers including DNS-layer attack prevention and network data exfiltration detection
Traffic Visibility
Complete application layer-7 traffic inspection and control with dynamic policy management based on AWS tags, application IDs, and user contexts
Standard contract
No
No
No
Customer reviews
4.3
23 ratings
23 AWS reviews
|
200 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Joao P.
Reliable network protection across cloud environments
Reviewed on Oct 06, 2025
Review provided by G2
What do you like best about the product?
What I like best about CloudGuard Network Security is that it gives really strong protection for my cloud traffic. It’s reliable, integrates well with AWS and Azure, and I like how easy it is to manage security policies in one place. The threat prevention feels solid and up to date.
What do you dislike about the product?
Sometimes the setup and configuration can be a bit tricky, especially for more complex environments. The interface could be a little more intuitive, and updates or policy changes can take some time to apply. It’s also not the cheapest option out there.
What problems is the product solving and how is that benefiting you?
CloudGuard Network Security helps us protect cloud workloads and traffic from external threats and misconfigurations. It makes it easier to manage security across multiple cloud platforms and keeps our policies consistent. The biggest benefit is better visibility and control, which gives us more confidence that our environment is secure.
Zin Min L.
Check Point CloudGuard Network Security Product is a reliable cloud-based security solution
Reviewed on Sep 27, 2025
Review provided by G2
What do you like best about the product?
This product provides a reliable and secure network for your businesses. It gives a massive amount of upside features for a cloud-based environment such as data loss prevention, IPS, application control, IPSec VPN, URL filtering, antivirus, threat emulation and threat extraction. Customer support provided by Check Point vendor is one of the best options to choose this product.
What do you dislike about the product?
First time implementation for an unexperienced engineer with this product is not good easy. Learning resources are not easy to understand for a junior. Its cost is a drawback feature for a developing country although its product's capabilities is absolutely good.
What problems is the product solving and how is that benefiting you?
For AWS Cloud, It protects cloud assets with a full suite of advanced security capabilities, including firewall, data protection, IPS, IPSec VPN for network traffic security, URL filtering, antivirus, threat emulation and threat extraction.
Min Thu R.
A scalable, unified solution with strong threat prevention and consistent security across cloud.
Reviewed on Sep 09, 2025
Review provided by G2
What do you like best about the product?
Check Point CloudGuard Network Security provides unified, cloud-native protection with advanced threat prevention, centralized policy management, and seamless scalability-making it an ideal solution for securing hybrid and multi-cloud environments with operational efficiency and deep visibility.
What do you dislike about the product?
While check point CloudGuard Network Security offers powerful, consistent threat prevention across multi-cloud environments, its value is often diminished by step licensing costs, difficult integrations, and limited visibility into detailed log data.
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Network Security is a robust, cloud-native solution that delivers consistent, advanced threat prevention and unified policy enforcement across multi-cloud, hybrid, and on-premises environments. It empowers organization to secure dynamic workloads, automate security operations, and reduce breach and compliance risks-all from a single, scalable management platform.
reviewer2751327
Enables secure access and traffic control with reliable security features
Reviewed on Sep 03, 2025
Review provided by PeerSpot
What is our primary use case?
My main use case for Check Point CloudGuard Network Security is that we're using it to filter inbound and outbound Azure traffic from on-premises to Azure and from Azure to the internet.
I use it for filtering traffic between on-premises and Azure to secure an SAP application accessed from on-premises while the SAP is in Azure.
What is most valuable?
The best features Check Point CloudGuard Network Security offers are security features, VPN capabilities, filtering, and IPS.
I rely on IPS and access control the most because it controls access to on-premises and from Azure.
Check Point CloudGuard Network Security has positively impacted my organization by making the network more secure and controlling the access to the applications.
What needs improvement?
I think Check Point CloudGuard Network Security is an ideal product, so I see no improvements needed.
If I had to think of one area where it could be improved or made easier, I would say that support isn't very good and documentation sometimes is lacking.
For how long have I used the solution?
I have been using Check Point CloudGuard Network Security for four years.
What do I think about the stability of the solution?
Check Point CloudGuard Network Security is stable in my experience.
What do I think about the scalability of the solution?
Check Point CloudGuard Network Security's scalability is good because we can put the firewalls in VM scale sets and scale.
How are customer service and support?
The customer support is not good.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I did not previously use a different solution before Check Point CloudGuard Network Security.
How was the initial setup?
My experience with pricing, setup cost, and licensing for Check Point CloudGuard Network Security is that pricing was good, the initial setup is easy, and licensing is a bring your own license, so it's good to bring licenses already from on-premises.
Which other solutions did I evaluate?
Before choosing Check Point CloudGuard Network Security, I evaluated other options, including Fortinet.
What other advice do I have?
My advice to others looking into using Check Point CloudGuard Network Security is to deploy with scale set.
I would rate Check Point CloudGuard Network Security an eight out of ten because it's mostly complete and the support is a minor downside.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Samrawit T.
Check Point CloudGuard Network Security – Enterprise‑Grade Defense Without Compromise
Reviewed on Aug 31, 2025
Review provided by G2
What do you like best about the product?
Its ability to deliver advanced, automated threat prevention with unified security management across hybrid and multi‑cloud environments, all from a single pane of glass, is what stands out most.
What do you dislike about the product?
Cost, a steep learning curve, and occasional deployment complexities—especially with integrations and console management—can make implementation and ongoing administration more challenging than expected.
What problems is the product solving and how is that benefiting you?
It addresses the challenge of securing hybrid and multi‑cloud environments by providing unified, automated threat visibility, enabling faster response to threats, simplified prevention and centralized management, and consistent security policies across all network assets.