Sold by: Check Point Software TechnologiesÂ
Deployed on AWS
Free Trial
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
4.4
Overview
Video
Video 1
Video
Product video
CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot, Threat Extraction and Threat Emulation. CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic. The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices. This offering will be deployed as a single "All-In-One" CloudGuard Network Security gateway and Security Management Server via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc. This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.
The Security Management Server is included in this "All-In-One" offering; there is no need to choose one of the Check Point Security Management offers.
To maintain the highest quality and security of our management solutions, Check Point recommends installing the latest recommended Jumbo Hotfix, especially after the initial deployment.
Highlights
- Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Sandblast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques). Includes Security Management Server.
- Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed for the dynamic security requirements of cloud deployments, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment, while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
- Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $0.91 |
r5.xlarge | $0.91 |
m8i-flex.16xlarge | $11.50 |
r6i.24xlarge | $15.34 |
m8i.metal-48xl | $48.67 |
m7i-flex.2xlarge | $1.50 |
r6i.4xlarge | $3.00 |
m5.16xlarge | $3.00 |
r5.12xlarge | $8.35 |
m7i-flex.16xlarge | $11.50 |
Vendor refund policy
Terminate the instance at any given time to stop incurring charges.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Resources
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/Â
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Palo Alto Networks
Top
10
In Data Analytics
Top
10
In Network Infrastructure
Top
10
In Network Infrastructure, Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Network Traffic Inspection
Advanced multi-layered network security with SSL/TLS traffic inspection and traffic forwarding capabilities
Threat Prevention Mechanisms
Includes Threat Extraction, Threat Emulation, Antivirus, and Anti-Bot protection using sandboxing techniques
Cloud Security Integration
Native integration with AWS services including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, and AWS Security Hub
Network Segmentation
Supports secure VPN connectivity between AWS and enterprise networks with IPsec VPN and traffic inspection across private subnets
Infrastructure Deployment
Supports Infrastructure as Code practices with CloudFormation templates and automation tools like Ansible and Terraform
Network Traffic Protection
Advanced cloud-native firewall service powered by FortiOS and FortiGuard Labs threat intelligence for securing cloud network traffic
Threat Intelligence
AI-powered intrusion prevention (IPS), data leak prevention (DLP), and advanced filtering capabilities to block malicious traffic and potential security breaches
Dynamic Policy Management
Security policies that dynamically use cloud metadata tags to follow cloud workloads without requiring static IP updates
Geo-Specific Security Control
Enforcement of compliance policies through geo-IP blocking and traffic restrictions to/from specified countries
Multi-Account Security Aggregation
Capability to consolidate security across multiple VPCs and accounts within an AWS region using a single firewall instance
Threat Prevention
Advanced machine learning-powered inspection engine that detects known and zero-day threats including exploits, malware, spyware, and command and control attacks
Web Security
Inline machine learning-based web security engine for real-time detection of phishing, ransomware, and evasive web-based attacks
File Analysis
Proprietary cloud-based hypervisor for static and dynamic file-based threat detection using advanced sandbox analysis techniques
Protocol Layer Security
Comprehensive security coverage across network layers including DNS-layer attack prevention and network data exfiltration detection
Traffic Visibility
Complete application layer-7 traffic inspection and control with dynamic policy management based on AWS tags, application IDs, and user contexts
Standard contract
No
No
No
Customer reviews
Evans Vasavan
Unified cloud security has improved automated threat prevention and clarified network visibility
Reviewed on Dec 09, 2025
Review provided by PeerSpot
What is our primary use case?
The main use cases for Check Point CloudGuard Network Security are to address the threats that are currently occurring, and it automates the network security while also providing rapid deployment. The automations are particularly effective in Check Point, offering all the cool features available.
What is most valuable?
The best features in Check Point CloudGuard Network Security include the prevention it provides to my organization via automated engines, unified security management across hybrid clouds, a complete security framework, and a clean and clear dashboard.
The main benefits that Check Point CloudGuard Network Security brings to the table include clean dashboards, clarity of architecture in my organization regarding what applications and traffic passes through, firewall and threat prevention, and integration with tools like Terraform , Cloud Formation, Kubernetes , and others.
Check Point CloudGuard Network Security provides unified security management across hybrid clouds and on-premises deployments.
The unified security management provided by Check Point CloudGuard Network Security affects my security operations by preventing many attacks, ensuring compliance, and improving the governance aspect. The automation is very good in that segment, and the cloud adapts to any changes or integrations very well. Overall, it is fantastic.
What needs improvement?
Check Point CloudGuard Network Security is working well currently. I do not think much needs to be improved, but while loading the console, it is a little bit lacking sometimes as it gets stuck, and we have to refresh it again. That part needs to be reduced.
For how long have I used the solution?
I have been working with Check Point CloudGuard Network Security for two years.
What do I think about the stability of the solution?
Apart from the console that I mentioned, I have not faced any other crashes, downtimes, performance issues, or stability issues with Check Point CloudGuard Network Security. The website has never crashed; there is just slowness, and that is all.
What do I think about the scalability of the solution?
The scalability aspect of Check Point CloudGuard Network Security is very good; it is perfect and easy to scale up and scale out.
How are customer service and support?
Since I have not escalated any questions regarding Check Point CloudGuard Network Security to the Check Point team, I cannot say much, but whenever I tag a ticket, the response is very good, so there are no issues with that.
How would you rate customer service and support?
Negative
Which solution did I use previously and why did I switch?
I have not evaluated any other options or solutions available in the market before choosing Check Point CloudGuard Network Security.
How was the initial setup?
The deployment process of Check Point CloudGuard Network Security was straightforward since it was a cloud-based product. We partnered for the initial setup, and they have been working for the past seven years. They have experienced engineers, and they completed it smoothly; there were no complexities in terms of deployment.
My experience onboarding Check Point CloudGuard Network Security was very good. I was part of it, and now I also manage it. There was nothing complex; the prerequisites were very clear from the partners and Check Point. The communication was good, and everything was executed perfectly.
What about the implementation team?
For the sake of this review, we have not integrated any products with Check Point CloudGuard Network Security yet because we are still in trial mode. We do have some challenges within the partner, and we are involved with a partner, so we are trying to integrate some applications. I do not know what those applications are because they have not disclosed them yet, as it involves a bank customer and disclosures happen only after everything is verified. We are facing some challenges, but we have a partner who is excellently coordinating with us, so that is not an issue.
What was our ROI?
Since I have been working for the past two years, a lot of risk has been reduced, but I cannot quantify the exact count. We do have reports that we provide to the management department on a weekly basis to verify and review, and it has been wonderful.
What's my experience with pricing, setup cost, and licensing?
Although I do not know much about the pricing or setup costs, Check Point CloudGuard Network Security is very cost-effective. If you want to secure your organization completely from all ends against attacks like ransomware or zero-day attacks, you definitely have to pay a particular price. If it is securing my organization, it is definitely cost-effective, but all business deals are presented by higher management based on that.
Which other solutions did I evaluate?
I have not used or evaluated other solutions that compete with Check Point CloudGuard Network Security, but I have been working on application controls, DLPs, and EDRs. Those technologies are what I know and work on.
Apart from Check Point CloudGuard Network Security, I have not worked on any other SD-WAN or Cloud and Data Center security products.
What other advice do I have?
The issues with Check Point CloudGuard Network Security stem from the bank sector itself. In the bank sector, they mostly use customized ports, and we need certain applications that are handled by different departments. We used to take approvals for a single port, and for different customized ports, we need different approvals. Management and IT are getting stuck, but that will get sorted out soon.
I have not faced any issues, so I cannot comment on the impact that Check Point CloudGuard Network Security has had on the confidence in secure cloud deployments and migrations.
Check Point CloudGuard Network Security definitely helps when it comes to cloud deployments and migrations, and I feel it reduces the risk. I can deploy application control, URL filtering, and we also have an antivirus that provides a perfect security posture in my organization. It also blocks zero-day malware and ransomware, making it a very big impact on my organization and very supportive.
As of now, nothing needs to be added to Check Point CloudGuard Network Security, but in case there is anything in the roadmap, I would definitely love to try that particular segment.
I would suggest to any organization considering Check Point CloudGuard Network Security that they should try it. They will also get clarity on their own organization's security implementation, and they can have good clarity on that. My overall rating for this review is 9 out of 10.
Animation
Consistent Cloud Security, Easy Setup
Reviewed on Dec 01, 2025
Review provided by G2
What do you like best about the product?
I appreciate that Check Point CloudGuard Network Security offers me consistent and automated security, which is essential for managing threats in hybrid and multicloud environments. The product's ease of setup makes it accessible for any user, allowing me to quickly implement and start protecting my cloud network without hassle. This ease of use combined with its robust security features gives me confidence in managing advanced threats and maintaining a secure multi-cloud infrastructure.
What do you dislike about the product?
I think there is room for improvement in Check Point CloudGuard Network Security, particularly concerning hybrid cloud security and ensuring consistency in management across public and private clouds.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to protect my cloud network from advanced threats and ensure consistent security policies across hybrid and multicloud environments with automated security.
Accounting
Strong Threat Prevention, Seamless Integration
Reviewed on Nov 30, 2025
Review provided by G2
What do you like best about the product?
I really appreciate Check Point CloudGuard Network Security for its strong threat prevention, which is crucial in protecting our cloud workloads. It effectively blocks cloud-based attacks, which adds an extra layer of security beyond what native cloud controls offer. I also value how seamlessly it integrates into our existing Check Point management stack. This smooth integration not only saves us a lot of time but also helps in maintaining consistent security policies across our operations. The ease of setup, especially for users with experience, is another aspect that I find commendable. Overall, these features significantly contribute to the product’s effectiveness and enhance our cybersecurity framework.
What do you dislike about the product?
The cost of Check Point CloudGuard Network Security can increase significantly as your environment grows. Because traffic inspection—particularly for encrypted data or east-west traffic within cloud networks, as well as inter-region traffic—requires both compute resources and bandwidth, an increase in traffic volume will naturally lead to higher expenses.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to secure our cloud workloads effectively, blocking cloud-based attacks. Its strong threat prevention enhances security beyond native cloud controls, and seamless integration with Check Point management saves time and ensures consistent policies.
Eliezer P.
Real-Time Visibility and Efficient Comprehensive Protection
Reviewed on Nov 25, 2025
Review provided by G2
What do you like best about the product?
I love the real-time visibility that Check Point CloudGuard Network Security provides me regarding cloud security. This allows me to respond effectively to incidents, which is crucial for protecting our data and operations. I also greatly value the comprehensive protection it offers for cloud environments. I like it because it covers all the security aspects I need, ensuring that all our areas are adequately protected. These features make this tool a vital part of our IT security strategy.
What do you dislike about the product?
Integration with more cloud platforms.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to protect against threats and network attacks. It provides me with real-time visibility and comprehensive protection, allowing me to respond effectively to incidents and secure all aspects of cloud security.
Aaron M.
Worry-Free Operation Delivers Total Peace of Mind
Reviewed on Nov 25, 2025
Review provided by G2
What do you like best about the product?
I really like how it does not need much set up. It is great for security and provides simple solutions to a complex problem. It has been a great addition.
What do you dislike about the product?
I have not experienced any downsides to the product. It has functioned as described and has become part of every day work. When there is an issue, it is quickly corrected.
What problems is the product solving and how is that benefiting you?
It is helping staff feel more secure when online. It is also supporting our growth. It has worked to improve efficiency and overall productivity. We do not worry about online security.