Overview
Video 1
Video 1

Product video
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers industry-leading threat prevention and multi-layered network security for workloads migrated to or deployed in AWS environments.
Comprehensive Cloud Network Security: CloudGuard Network Security for AWS protects cloud assets with a full suite of advanced security capabilities, including: firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, anti-Bot, threat emulation, and threat extraction. These features enable proactive defense against known and unknown threats, ensuring robust protection for cloud workloads.
Industry-Leading Threat Prevention: CloudGuard Network Security for AWS provides advanced threat prevention to secure AWS environments from sophisticated threats, unapproved access, and application-layer Denial of Service (DoS) attacks with industry-leading catch rates.
Full Control of Network Traffic: CloudGuard Network Security for AWS ensures secure, encrypted data flows between your on-premises network and your AWS VPCs. It inspects traffic entering and exiting private subnets in the VPC ("North-South") as well as between VPCs ("East-West").
Unified Security Management: Extend on-premises security policies into the AWS cloud with unified, centralized management via Check Point CloudGuard Security Management Server. Manage policies, logs, and reports consistently across AWS, hybrid, and on-premises environments from a single pane of glass. This listing includes the gateway only. For management, use Check Point Smart-1 Cloud: https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/Â
Automated, Scalable Cloud Security: Integrates with infrastructure-as-code tools like Terraform and Ansible for policy automation and cloud-native scaling. CloudGuard dynamically adapts security policies based on real-time cloud metadata and changes. Supports AWS Transit Gateway, auto-scaling, high availability, and multi-AZ redundancy.
Flexible Licensing and Seamless AWS Integration: Deploy within minutes as either a single gateway, as a high availability cluster, or as an auto scaling group via Check Point CloudFormation templates (sk111013). Recommended deployment on a 4 vCPU instance for optimal performance. CloudGuard Network Security integrates with a broad range of AWS services, including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.
Getting Started: Supports both Pay-As-You-Go (PAYG) and Bring Your Own License (BYOL) models with a flexible pricing model that supports both usage-based billing and contract-based subscriptions. Start your free 30-day trial to gain full access to CloudGuards features and capabilities. At the end of the trial, your subscription will automatically convert to a paid, usage-based plan, unless canceled beforehand. Request a private offer for custom pricing and terms. For a guided walkthrough, you may request a product demo through this listing.
Highlights
- Advanced Protection with Security Features: Firewall, DLP, IPS, Application Control, IPsec VPN, URL Filtering, Antivirus, Anti-Bot, Threat Emulation and Threat Extraction.
- Industry-Leading Threat Prevention: Cutting-edge threat prevention with industry-leading catch rate of malware, ransomware and other types of attacks (per Miercom and Cyberratings, 2025).
- Unified Security Management: Provides consistent visibility, policy management, logging, reporting and control across hybrid-clouds and on-premises from a single pane of glass.
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide

Financing for AWS Marketplace purchases
Pricing
Free trial
- ...
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $0.91 |
m5.4xlarge | $3.00 |
m6i.xlarge | $0.91 |
r5.24xlarge | $16.42 |
r5.large | $0.80 |
r5.8xlarge | $5.86 |
m6i.24xlarge | $16.42 |
r5a.xlarge | $0.91 |
r5b.12xlarge | $8.79 |
r5b.xlarge | $0.91 |
Vendor refund policy
Terminate the instance at any given time to stop incurring charges.
Custom pricing options
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/Â
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Standard contract
Customer reviews
Cloud security has strengthened compliance and now protects internet access for our workloads
What is our primary use case?
The main use case of using Check Point CloudGuard Network Security is to secure all of our cloud infrastructures while they are browsing the internet and scanning everything.
We use Check Point CloudGuard Network Security for HTTPS inspection as well as URL filtering and providing only a certain limited access for the VMs to certain websites.
What is most valuable?
The best features Check Point CloudGuard Network Security offers are its threat emulation and threat extraction blade as well as bring your own license where you can use the on-prem Check Point CloudGuard and decommission it to use in the cloud.
I believe Check Point CloudGuard Network Security has impacted our organization positively because it is one of the stable products that I have used till now, and we do not have to upgrade Check Point CloudGuard Network Security for any sort of CVE or bug in its OS and it is very stable.
Check Point CloudGuard Network Security has decreased the organizational risk because it provides compliance with HIPAA as well as PCI DSS by means of its compliance blade. It makes it easier for us to determine if we are compliant or not.
It made me more secure because when you talk about security, Check Point CloudGuard Network Security is on top of the list with 99.8 in blocking malware according to the Miercom list. I believe it has had a positive effect and we have not had any incidents.
What needs improvement?
Check Point CloudGuard Network Security needs to focus more on the VPN side by being more flexible with configuring the VPN with route-based VPN and having a failover with it.
For how long have I used the solution?
I have been using Check Point CloudGuard Network Security for about five to six months, and we are still in the evaluation phase.
What do I think about the stability of the solution?
We have not faced any incident to date when using Check Point CloudGuard Network Security. We have faced zero downtime, and we have not been compromised.
Check Point CloudGuard Network Security is one of the stable products I have used.
What do I think about the scalability of the solution?
Check Point CloudGuard Network Security is very scalable. It depends upon your license, and if you purchase the right kind of license, then it is very scalable.
How are customer service and support?
The customer support for Check Point CloudGuard Network Security is on point. If you raise a case, they will reply within half an hour. I would rate the customer support for Check Point CloudGuard Network Security at a 10.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
We did not use a different solution previously.
How was the initial setup?
The setup was acceptable. We got a good deal.
What about the implementation team?
We only need fewer employees because Check Point CloudGuard Network Security is easier to use in the cloud and we do not have to tweak every setting. However, we are yet to see a good return on investment.
What was our ROI?
We do not need as many employees because Check Point CloudGuard Network Security is easier to use in the cloud and we do not have to tweak every setting. However, we are yet to see a good return on investment.
What's my experience with pricing, setup cost, and licensing?
We are a partner with Check Point CloudGuard Network Security.
Which other solutions did I evaluate?
We did not evaluate any other options.
What other advice do I have?
Currently, we have not used Check Point CloudGuard Network Security alongside with any other Check Point products.
Check Point CloudGuard Network Security does provide unified management access. Currently, we do not have any on-prem devices, but you can use the CloudGuard management system to onboard both cloud as well as on-prem gateways, where you can see the logs for both the devices. Currently, we have not used it on-prem, so we do not have this capability.
If you are looking at the value and security and you do not want to compromise, then Check Point CloudGuard Network Security is one of the best solutions you could have in your organization. I would give this review an overall rating of 9.
Which deployment model are you using for this solution?
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Centralized cloud security has improved segmentation and visibility but still needs faster policy updates
What is our primary use case?
A recent example of how I use Check Point CloudGuard Network Security to enforce segmentation or manage policies was when we deployed a new application tier in the cloud. I used CloudGuard to segment it from the rest of the environment and apply stricter threat prevention rules.
Check Point CloudGuard Network Security is deployed in the public cloud setup in my case.
Check Point CloudGuard Network Security does provide unified security management across hybrid clouds as well as on-premises. Having policies and visibility centralized in one place makes operations much smoother. Instead of managing separate rule sets for cloud and on-premises, I can apply consistent policies across both and see all traffic flows in a single dashboard. That cuts down on configuration risk and makes troubleshooting faster.
I do utilize Check Point CloudGuard Network Security alongside other Check Point products. In my case, I use it alongside Quantum and Harmony Endpoint.
What is most valuable?
The most valuable feature of Check Point CloudGuard Network Security in my day-to-day work is the centralized cloud-native policy management. I can control all the clouds, which is very beneficial.
Check Point CloudGuard Network Security has helped us reduce misconfigurations and improve how quickly we can secure new cloud workloads. We have also had fewer issues with unexpected traffic because the visibility tools make it easier to spot problems.
Check Point CloudGuard Network Security has helped me reduce my organizational risk. The clear visibility into cloud traffic and the automatic adaptation to cloud changes reduced the chance of misconfigurations, which were one of our biggest risks. The number of policy-related issues we had to fix dropped noticeably once we started using it.
It has increased my confidence in secure cloud deployments and migrations quite a bit. Knowing that policy adjusts automatically when new resources come online makes migration less stressful. The consistent visibility across environments also helps because I can verify traffic flows.
What needs improvement?
For how long have I used the solution?
What do I think about the stability of the solution?
What do I think about the scalability of the solution?
How are customer service and support?
How would you rate customer service and support?
Which solution did I use previously and why did I switch?
How was the initial setup?
What about the implementation team?
What was our ROI?
Which other solutions did I evaluate?
We did evaluate other options before choosing Check Point CloudGuard Network Security. The main alternatives we evaluated were Palo Alto's Prisma Cloud and some of the native security tools from Azure . They work for certain use cases, but Check Point CloudGuard Network Security gave us a stronger unified policy management.
What other advice do I have?
I would advise others looking into using Check Point CloudGuard Network Security to first plan ahead. I recommend starting with a small pilot across one or two tiers, defining policy and segmentation baselines upfront.
Unified cloud security has improved automated threat prevention and clarified network visibility
What is our primary use case?
The main use cases for Check Point CloudGuard Network Security are to address the threats that are currently occurring, and it automates the network security while also providing rapid deployment. The automations are particularly effective in Check Point, offering all the cool features available.
What is most valuable?
The best features in Check Point CloudGuard Network Security include the prevention it provides to my organization via automated engines, unified security management across hybrid clouds, a complete security framework, and a clean and clear dashboard.
The main benefits that Check Point CloudGuard Network Security brings to the table include clean dashboards, clarity of architecture in my organization regarding what applications and traffic passes through, firewall and threat prevention, and integration with tools like Terraform , Cloud Formation, Kubernetes , and others.
Check Point CloudGuard Network Security provides unified security management across hybrid clouds and on-premises deployments.
The unified security management provided by Check Point CloudGuard Network Security affects my security operations by preventing many attacks, ensuring compliance, and improving the governance aspect. The automation is very good in that segment, and the cloud adapts to any changes or integrations very well. Overall, it is fantastic.
What needs improvement?
Check Point CloudGuard Network Security is working well currently. I do not think much needs to be improved, but while loading the console, it is a little bit lacking sometimes as it gets stuck, and we have to refresh it again. That part needs to be reduced.
For how long have I used the solution?
I have been working with Check Point CloudGuard Network Security for two years.
What do I think about the stability of the solution?
Apart from the console that I mentioned, I have not faced any other crashes, downtimes, performance issues, or stability issues with Check Point CloudGuard Network Security. The website has never crashed; there is just slowness, and that is all.
What do I think about the scalability of the solution?
The scalability aspect of Check Point CloudGuard Network Security is very good; it is perfect and easy to scale up and scale out.
How are customer service and support?
Since I have not escalated any questions regarding Check Point CloudGuard Network Security to the Check Point team, I cannot say much, but whenever I tag a ticket, the response is very good, so there are no issues with that.
How would you rate customer service and support?
Negative
Which solution did I use previously and why did I switch?
I have not evaluated any other options or solutions available in the market before choosing Check Point CloudGuard Network Security.
How was the initial setup?
The deployment process of Check Point CloudGuard Network Security was straightforward since it was a cloud-based product. We partnered for the initial setup, and they have been working for the past seven years. They have experienced engineers, and they completed it smoothly; there were no complexities in terms of deployment.
My experience onboarding Check Point CloudGuard Network Security was very good. I was part of it, and now I also manage it. There was nothing complex; the prerequisites were very clear from the partners and Check Point. The communication was good, and everything was executed perfectly.
What about the implementation team?
For the sake of this review, we have not integrated any products with Check Point CloudGuard Network Security yet because we are still in trial mode. We do have some challenges within the partner, and we are involved with a partner, so we are trying to integrate some applications. I do not know what those applications are because they have not disclosed them yet, as it involves a bank customer and disclosures happen only after everything is verified. We are facing some challenges, but we have a partner who is excellently coordinating with us, so that is not an issue.
What was our ROI?
Since I have been working for the past two years, a lot of risk has been reduced, but I cannot quantify the exact count. We do have reports that we provide to the management department on a weekly basis to verify and review, and it has been wonderful.
What's my experience with pricing, setup cost, and licensing?
Although I do not know much about the pricing or setup costs, Check Point CloudGuard Network Security is very cost-effective. If you want to secure your organization completely from all ends against attacks like ransomware or zero-day attacks, you definitely have to pay a particular price. If it is securing my organization, it is definitely cost-effective, but all business deals are presented by higher management based on that.
Which other solutions did I evaluate?
I have not used or evaluated other solutions that compete with Check Point CloudGuard Network Security, but I have been working on application controls, DLPs, and EDRs. Those technologies are what I know and work on.
Apart from Check Point CloudGuard Network Security, I have not worked on any other SD-WAN or Cloud and Data Center security products.
What other advice do I have?
The issues with Check Point CloudGuard Network Security stem from the bank sector itself. In the bank sector, they mostly use customized ports, and we need certain applications that are handled by different departments. We used to take approvals for a single port, and for different customized ports, we need different approvals. Management and IT are getting stuck, but that will get sorted out soon.
I have not faced any issues, so I cannot comment on the impact that Check Point CloudGuard Network Security has had on the confidence in secure cloud deployments and migrations.
Check Point CloudGuard Network Security definitely helps when it comes to cloud deployments and migrations, and I feel it reduces the risk. I can deploy application control, URL filtering, and we also have an antivirus that provides a perfect security posture in my organization. It also blocks zero-day malware and ransomware, making it a very big impact on my organization and very supportive.
As of now, nothing needs to be added to Check Point CloudGuard Network Security, but in case there is anything in the roadmap, I would definitely love to try that particular segment.
I would suggest to any organization considering Check Point CloudGuard Network Security that they should try it. They will also get clarity on their own organization's security implementation, and they can have good clarity on that. My overall rating for this review is 9 out of 10.
