Sold by: Check Point Software TechnologiesÂ
Deployed on AWS
Free Trial
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
Overview
Video
Video 1
Video
Product video
CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot, Threat Extraction and Threat Emulation. CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic. The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices. This offering will be deployed as a single "All-In-One" CloudGuard Network Security gateway and Security Management Server via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc. This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.
The Security Management Server is included in this "All-In-One" offering; there is no need to choose one of the Check Point Security Management offers.
To maintain the highest quality and security of our management solutions, Check Point recommends installing the latest recommended Jumbo Hotfix, especially after the initial deployment.
Highlights
- Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Sandblast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques). Includes Security Management Server.
- Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed for the dynamic security requirements of cloud deployments, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment, while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
- Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $0.91 |
r5b.xlarge | $0.91 |
r5n.2xlarge | $1.50 |
m6i.12xlarge | $8.35 |
r6i.8xlarge | $6.00 |
r6i.large | $0.80 |
m6i.24xlarge | $15.34 |
r5.16xlarge | $3.00 |
r5a.xlarge | $0.91 |
r5b.12xlarge | $8.35 |
Vendor refund policy
Terminate the instance at any given time to stop incurring charges.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Resources
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/Â
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Palo Alto Networks
Top
10
In Data Analytics
Top
10
In Network Infrastructure
Top
10
In Network Infrastructure, Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Network Traffic Inspection
Advanced multi-layered network security with SSL/TLS traffic inspection and traffic forwarding capabilities
Threat Prevention Mechanisms
Includes Threat Extraction, Threat Emulation, Antivirus, and Anti-Bot protection using sandboxing techniques
Cloud Security Integration
Native integration with AWS services including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, and AWS Security Hub
Network Segmentation
Supports secure VPN connectivity between AWS and enterprise networks with IPsec VPN and traffic inspection across private subnets
Infrastructure Deployment
Supports Infrastructure as Code practices with CloudFormation templates and automation tools like Ansible and Terraform
Network Traffic Protection
Advanced cloud-native firewall service powered by FortiOS and FortiGuard Labs threat intelligence for securing cloud network traffic
Threat Intelligence
AI-powered intrusion prevention (IPS), data leak prevention (DLP), and advanced filtering capabilities to block malicious traffic and potential security breaches
Dynamic Policy Management
Security policies that dynamically use cloud metadata tags to follow cloud workloads without requiring static IP updates
Geo-Specific Security Control
Enforcement of compliance policies through geo-IP blocking and traffic restrictions to/from specified countries
Multi-Account Security Aggregation
Capability to consolidate security across multiple VPCs and accounts within an AWS region using a single firewall instance
Threat Prevention
Advanced machine learning-powered inspection engine that detects known and zero-day threats including exploits, malware, spyware, and command and control attacks
Web Security
Inline machine learning-based web security engine for real-time detection of phishing, ransomware, and evasive web-based attacks
File Analysis
Proprietary cloud-based hypervisor for static and dynamic file-based threat detection using advanced sandbox analysis techniques
Protocol Layer Security
Comprehensive security coverage across network layers including DNS-layer attack prevention and network data exfiltration detection
Traffic Visibility
Complete application layer-7 traffic inspection and control with dynamic policy management based on AWS tags, application IDs, and user contexts
Standard contract
No
No
No
Customer reviews
4.3
29 ratings
29 AWS reviews
|
207 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
RohitMutha
Auto-scaling has been streamlined and email threats have been significantly reduced
Reviewed on Nov 18, 2025
Review provided by PeerSpot
What is our primary use case?
The primary use case for Check Point CloudGuard Network Security is auto-scaling, which is required for us and serves as one of our primary cases for use.
What is most valuable?
Features like Threat Extraction and Threat Emulation in Check Point CloudGuard Network Security are the most useful features for us.
Check Point CloudGuard Network Security has reduced our threat landscape to a great extent and is performing excellently when it comes to finding risks in external email attachments, which is the major benefit for us.
What needs improvement?
There is nothing where I have come to a roadblock where I think that a particular feature is missing. There is no feature that I think is missing.
For how long have I used the solution?
I have been using Check Point CloudGuard Network Security for the last six years.
What do I think about the stability of the solution?
Integrating Check Point CloudGuard Network Security with a different solution works fine. Scalability is wonderful, and there are no concerns.
What do I think about the scalability of the solution?
Integrating Check Point CloudGuard Network Security with a different solution works fine. Scalability is wonderful, and there are no concerns.
How are customer service and support?
Technical support by Check Point is good. I can rate it nine out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
Check Point CloudGuard Network Security was my first solution of this kind.
How was the initial setup?
The setup was straightforward. The documentation was pretty clear, and as I followed it, the process was simple.
Implementation of Check Point CloudGuard Network Security did not take much time. Implementation was planned for several weeks, but the planning took a bit of time. The actual technical work did not take much time.
What about the implementation team?
I implemented Check Point CloudGuard Network Security myself.
What's my experience with pricing, setup cost, and licensing?
Pricing does not fall under my responsibilities as I am a technical person and do not focus on pricing.
Which other solutions did I evaluate?
I am not looking for any new solution.
What other advice do I have?
Check Point, being the global leader in providing network security, also provides Check Point appliances. The operating system itself is time-tested, and this time-tested software platform gives us confidence. The firmware, Gaia OS, has given us the confidence to go with Check Point.
We are four people using the product in our organization at the moment.
The product is quite quick, but when it comes to communication, there is some lack of communication regarding escalation and related matters.
I have given this product a review rating of ten out of ten.
Raxit Manandhar
Unified policy management has simplified operations and improved visibility across environments
Reviewed on Nov 12, 2025
Review from a verified AWS customer
What is our primary use case?
Our main use case for Check Point CloudGuard Network Security is to provide a service to third-party organizations, as we are the vendor that implements firewall devices. Currently, we have implemented the network Check Point security firewall in many of our clients that is on-premises, but now we are exploring options for clients that are on cloud and we are trying to achieve the same level of security for the clients' machines that are on the cloud.
The main use case would be to use HTTPS inspection as well as a DLPÂ feature that is provided in the Next Generation Firewall so that none of the traffic containing PII or PHI and personal HIPAA traffic does not get over the internet from our customers or from our end.
What is most valuable?
The best feature that Check Point CloudGuard Network Security provides is CDR, Content Disarm and Re-arm, where it inspects the files and then looks into the file, takes out the malicious code, reconstructs it and sends it to the user. Another valuable feature would be its Zero-phishing capabilities.
I have found the effectiveness of CDR and Zero-phishing features to be great, and we are even seeing it in our environment. We have not yet faced any phishing links in our organization as a result of the zero-phishing features of Check Point CloudGuard Network Security.
Check Point CloudGuard Network Security has positively impacted our organization by making our cloud platform more secure. Traditional firewalls cannot be relied upon to protect everything, and the firewall ratings for AWSÂ as well as cloud native firewalls are not that high. Having Check Point CloudGuard Network Security in the cloud has helped us secure our cloud platforms.
What needs improvement?
The only thing that Check Point CloudGuard Network Security lacks is that for VPN, you need to buy a different model. You need to be in the HA sort of things to establish the IPSec between another firewall or maybe another cloud vendor, and that is the only thing that bothers me about Check Point CloudGuard Network Security.
For how long have I used the solution?
We have recently been using Check Point CloudGuard Network Security.
What do I think about the stability of the solution?
Check Point CloudGuard Network Security is a stable product.
What do I think about the scalability of the solution?
The pay-as-you-go model is very good for its scalability feature.
How are customer service and support?
Customer support has been awesome, and they respond within fifteen to twenty minutes of opening the ticket. I would rate the customer support a ten out of ten.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We did not use any other solution prior to Check Point CloudGuard Network Security, as it is the first solution that we are testing.
How was the initial setup?
The experience with pricing, setup cost, and licensing has been that the pricing is very competitive because of the bring your own license as well as pay-as-you-go model. We got the best pricing available.
What was our ROI?
I have seen a return on investment, and we are still in evaluation mode using a trial license. I believe that it will save our time because we can manage everything from a single platform.
Which other solutions did I evaluate?
We have not used any of the other products competing with Check Point CloudGuard Network Security. We are exploring it, and after this evaluation, we may think of exploring others.
What other advice do I have?
I would rate Check Point CloudGuard Network Security around eight or nine out of ten.
We are currently using Check Point CloudGuard Network Security on public cloud on AWSÂ . AWS is our cloud provider.
We did not purchase Check Point CloudGuard Network Security through the AWS Marketplace . We directly talked to the distributor and have been using a trial license for this.
Check Point CloudGuard Network Security provides unified security management across hybrid clouds as well as on-premises, which makes everything easy because you can push policies and see everything across every Check Point Next Generation Firewall across your entire cloud and on-premises in a single management server. This helps tremendously and makes our job much easier to view logs, push policies, and manage everything.
Check Point CloudGuard Network Security has helped us reduce our organizational risk significantly, and I believe in Check Point strongly because it has only four critical CVEs from 2020 to 2025. We do not have to have a major upgrade every time compared to its competition, which has had more than fifteen to sixteen critical vulnerabilities from 2020 to 2025. This certainly proves that Check Point's secured firewall OS security is better than its competitors and it will provide the best security to its network.
I feel very comfortable using Check Point CloudGuard Network Security because I have been using Check Point on-premises as well. Migrating to Check Point CloudGuard Network Security feels similar to doing the migration on Check Point Next Generation Firewall on-premises.
I utilize Check Point CloudGuard Network Security alongside Check Point Infinity Playbooks to have some automated tailored solutions. For example, if a certain IP address has a request of multiple times, maybe fifteen times per second, then I block that traffic, saying that it is a DDoS. This is what I am testing right now and it is working perfectly.
If you are considering using Check Point CloudGuard Network Security and do not want to compromise on security, then Check Point CloudGuard Network Security is the only product you should look for.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Jayakumar G.
Robust Cloud Security with Seamless Multi-Cloud Integration
Reviewed on Nov 12, 2025
Review provided by G2
What do you like best about the product?
Check Point CloudGuard Network Security is a strong, automatic threat prevention and fits easily with multi-cloud setup. It provides centralized management, scalability and compliance to secure cloud implementation.
What do you dislike about the product?
The configurations involved in check point cloud guard might be complicated to the teams that lack in-depth knowledge in cloud security. Its pricing model is also a little high when compared to small organizations or organizations with constrained budgets.
What problems is the product solving and how is that benefiting you?
It safeguards cloud environments by preventing sophisticated cyber adversaries and unauthorized access by means of automated and consolidated security regulations. This increases transparency, compliance and enhances the overall security of the cloud network.
Manish T.
Flexible Cloud Security with Scalable Licensing Options
Reviewed on Nov 07, 2025
Review provided by G2
What do you like best about the product?
Checkpoint Cloudguard Network Security supports both public as well as private cloud. It has different type of licensing BYOL which depends upon number of cores as well as pay as you go model and it will increase the capacity as the size grow.
What do you dislike about the product?
It is fully dependent upon cloud like AWS and Azure for whose we donot have any access to their infra. We will be vulnerable for the issue they face in their services like last time.
What problems is the product solving and how is that benefiting you?
It solves our need to increase the firewall capacity during our peak season due to its pay as you go licensing model. It also auto retrieves all the object from its Cloud manager once any object is created in the cloud.
Devraj K.
Effortless Cloud Integration and Flexible Licensing
Reviewed on Nov 06, 2025
Review provided by G2
What do you like best about the product?
The most useful features about checkpoint is that how it fetches all the object from cloud when you create the datacenter. It has different licesing feature like BYOL which depends upon the number of core as well as elastic license which depend upon the volume of traffic passed.
What do you dislike about the product?
It mainly lies on cloud platform and it depends upon cloud to work without any disrution. Like the outage that happened on last time both for aws and azure, this would result in outage for other companies as well since the infra wont be accessible to anyone.
What problems is the product solving and how is that benefiting you?
It has improved the elasticity of our firewall as the traffic during season gets easily handled by the firewall and we do not have to worry about any drops in the packet and firewall not handling it.