Listing Thumbnail

    Check Point CloudGuard Network Security

     Info
    Deployed on AWS
    Free Trial
    Check Point CloudGuard Network Security is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.

    Overview

    Play video

    Check Point CloudGuard Network Security is a cloud-native security gateway that delivers industry-leading threat prevention and multi-layered network security for workloads migrated to or deployed in AWS environments.

    Comprehensive Cloud Network Security: CloudGuard Network Security for AWS protects cloud assets with a full suite of advanced security capabilities, including: firewall, Data Loss Prevention (DLP), Intrusion Prevention System (IPS), application control, IPsec VPN, URL filtering, antivirus, anti-Bot, threat emulation, and threat extraction. These features enable proactive defense against known and unknown threats, ensuring robust protection for cloud workloads.

    Industry-Leading Threat Prevention: CloudGuard Network Security for AWS provides advanced threat prevention to secure AWS environments from sophisticated threats, unapproved access, and application-layer Denial of Service (DoS) attacks with industry-leading catch rates.

    Full Control of Network Traffic: CloudGuard Network Security for AWS ensures secure, encrypted data flows between your on-premises network and your AWS VPCs. It inspects traffic entering and exiting private subnets in the VPC ("North-South") as well as between VPCs ("East-West").

    Unified Security Management: Extend on-premises security policies into the AWS cloud with unified, centralized management via Check Point CloudGuard Security Management Server. Manage policies, logs, and reports consistently across AWS, hybrid, and on-premises environments from a single pane of glass. This listing includes the gateway only. For management, use Check Point Smart-1 Cloud: https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ 

    Automated, Scalable Cloud Security: Integrates with infrastructure-as-code tools like Terraform and Ansible for policy automation and cloud-native scaling. CloudGuard dynamically adapts security policies based on real-time cloud metadata and changes. Supports AWS Transit Gateway, auto-scaling, high availability, and multi-AZ redundancy.

    Flexible Licensing and Seamless AWS Integration: Deploy within minutes as either a single gateway, as a high availability cluster, or as an auto scaling group via Check Point CloudFormation templates (sk111013). Recommended deployment on a 4 vCPU instance for optimal performance. CloudGuard Network Security integrates with a broad range of AWS services, including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, AWS Transit Gateway, AWS Outposts, and Amazon Macie.

    Getting Started: Supports both Pay-As-You-Go (PAYG) and Bring Your Own License (BYOL) models with a flexible pricing model that supports both usage-based billing and contract-based subscriptions. Start your free 30-day trial to gain full access to CloudGuards features and capabilities. At the end of the trial, your subscription will automatically convert to a paid, usage-based plan, unless canceled beforehand. Request a private offer for custom pricing and terms. For a guided walkthrough, you may request a product demo through this listing.

    Highlights

    • Advanced Protection with Security Features: Firewall, DLP, IPS, Application Control, IPsec VPN, URL Filtering, Antivirus, Anti-Bot, Threat Emulation and Threat Extraction.
    • Industry-Leading Threat Prevention: Cutting-edge threat prevention with industry-leading catch rate of malware, ransomware and other types of attacks (per Miercom and Cyberratings, 2025).
    • Unified Security Management: Provides consistent visibility, policy management, logging, reporting and control across hybrid-clouds and on-premises from a single pane of glass.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux Gaia 3.10

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    Check Point CloudGuard Network Security

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (122)

     Info
    • ...
    Dimension
    Cost/hour
    c6in.xlarge
    Recommended
    $0.91
    m6a.24xlarge
    $16.41
    c5d.4xlarge
    $3.00
    c6in.24xlarge
    $16.41
    c6i.xlarge
    $0.91
    m7a.12xlarge
    $9.41
    c5.4xlarge
    $3.00
    c6in.12xlarge
    $9.41
    m6a.12xlarge
    $9.41
    m7a.xlarge
    $0.91

    Vendor refund policy

    Terminate the instance at any given time to stop incurring charges.

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:

    1. SSH password authentication is disabled in /etc/ssh/sshd_config
    2. For information regarding Firefox and Chrome refer to sk121373.

    Support

    Vendor support

    This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/  To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/ 

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Log Analysis, Network Infrastructure
    Top
    10
    In Network Infrastructure
    Top
    10
    In Network Infrastructure, Security

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Network Traffic Inspection
    Inspects traffic entering and exiting private subnets in VPC ("North-South") and between VPCs ("East-West")
    Advanced Threat Prevention
    Provides multi-layered security capabilities including firewall, IPS, threat emulation, and threat extraction with advanced catch rates
    Cloud Infrastructure Integration
    Supports infrastructure-as-code tools like Terraform and Ansible, dynamically adapts security policies based on cloud metadata
    Security Protocol Coverage
    Comprehensive security features including Data Loss Prevention, application control, IPsec VPN, URL filtering, antivirus, and anti-Bot protection
    Cloud Service Compatibility
    Integrates with AWS services including Gateway Load Balancer, AWS Security Hub, VPC Ingress Routing, AWS Traffic Mirroring, and AWS Transit Gateway
    Network Traffic Protection
    Advanced cloud-native firewall service powered by FortiOS and FortiGuard Labs threat intelligence for securing cloud network traffic
    Threat Intelligence
    AI-powered intrusion prevention (IPS), data leak prevention (DLP), and advanced filtering capabilities to block malicious traffic and potential security breaches
    Dynamic Policy Management
    Security policies that dynamically use cloud metadata tags to follow cloud workloads without requiring static IP updates
    Geo-Specific Security Control
    Enforcement of compliance policies through geo-IP blocking and traffic restrictions to/from specified countries
    Multi-Account Security Aggregation
    Capability to consolidate security across multiple VPCs and accounts within an AWS region using a single firewall instance
    Threat Prevention
    Advanced machine learning-powered inspection engine that detects known and zero-day threats including exploits, malware, spyware, and command and control attacks
    Web Security
    Inline machine learning-based web security engine for real-time detection of phishing, ransomware, and evasive web-based attacks
    File Analysis
    Proprietary cloud-based hypervisor for static and dynamic file-based threat detection using advanced sandbox analysis techniques
    Protocol Layer Security
    Comprehensive security coverage across network layers including DNS-layer attack prevention and network data exfiltration detection
    Traffic Visibility
    Complete application layer-7 traffic inspection and control with dynamic policy management based on AWS tags, application IDs, and user contexts

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.3
    23 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    17%
    74%
    9%
    0%
    0%
    23 AWS reviews
    |
    199 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    reviewer2753559

    Improved security posture and streamlined compliance while user interface could be more intuitive

    Reviewed on Aug 29, 2025
    Review from a verified AWS customer
    ">

    What is our primary use case?

    The main use case for Check Point CloudGuard Network Security  is for perimeter security and analyzing traffic in the network environment.

    Check Point CloudGuard Network Security  offers deep visibility into traffic, detailed logs, and real-time monitoring to see what applications, users, and devices are communicating on the network. Apart from that, it prevents lateral movement, stops phishing attacks, and mitigates DDoS. The main use case is to provide protection for a hybrid environment such as on-prem and multi-cloud by having consistent security. It enforces zero trust access to critical applications.

    What is most valuable?

    The best features that Check Point CloudGuard Network Security offers include deep visibility into traffic, detailed logs, and real-time monitoring to see what applications, users, and devices are communicating on the network. Apart from that, it prevents lateral movement, stops phishing attacks, and mitigates DDoS. The solution provides protection for hybrid environments such as on-prem and multi-cloud by having consistent security and enforces zero trust access to critical applications.

    The best feature is unified threat prevention, including IPS, antivirus, anti-bot, URL filtering, and Sandboxing in one platform. It provides seamless integration with AWS , Azure , and GCP. Furthermore, it offers centralized management from which we can manage security policies across cloud and on-prem solutions in a single console, known as Smart Console. From this, we can implement automation and DevOps support, as well as infrastructure as code security templates for faster deployment.

    Cloud-native integration automatically adapts to changes in our AWS , Azure , or GCP environments; for instance, if a new workload is spun up, policies are applied instantly. Centralized management offers one console for both on-prem and multi-cloud environments. Additionally, automation and DevOps support allow security policies to be deployed as code and integrated into CI/CD pipelines.

    Check Point CloudGuard Network Security has positively impacted our organization by improving our security posture. We have seen a sharp reduction in successful intrusion attacks because of its unified threat prevention, along with greater visibility and control. CloudGuard gave us full visibility into east-west traffic inside our local or cloud environment. Previously, we monitored north-south traffic, which helped detect unauthorized lateral movement early. It has enabled faster incident response and stronger compliance with standards such as PCI DSS, HIPAA, and GDPR, which made audits smoother and helped us maintain continuous compliance in the cloud.

    What needs improvement?

    Areas for improvement for Check Point CloudGuard Network Security include user interface and usability, pricing and licensing, integration with third-party tools, reporting and analytics, depth of automation, and support.

    In terms of user interface and usability, the Smart Console UI is feature-rich; however, for new admins, navigation is not always intuitive, and log search feels clunky compared to SIM tools. Policy editing could be faster with bulk or drag-and-drop options, and dashboards need more customization. Streamlining these would make day-to-day use much better.

    For how long have I used the solution?

    I have been using Check Point CloudGuard Network Security for the past one year.

    What do I think about the stability of the solution?

    Check Point CloudGuard Network Security is stable.

    How are customer service and support?

    Customer support for Check Point CloudGuard Network Security is average. I would rate the customer support as six on a scale of 1 to 10.

    How would you rate customer service and support?

    Neutral

    What was our ROI?

    I have seen a return on investment from using Check Point CloudGuard Network Security in both money and time saved.

    What's my experience with pricing, setup cost, and licensing?

    My experience with the pricing, setup cost, and licensing for Check Point CloudGuard Network Security is that it was good.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Insurance

    Comprehensive CloudGuard Security for Dynamic Environments

    Reviewed on Aug 22, 2025
    Review provided by G2
    What do you like best about the product?
    What I like most about Check Point CloudGuard Network Security is its ability to deliver consistent and powerful attack protection across many cloud platforms, including AWS, Azure, and GCP. The extensive integration with native cloud services allows for flexible deployment while maintaining high levels of security. Advanced threat intelligence, unified security management, and automatic posture correction provide robust protection for dynamic cloud workloads. Scalability and visibility across hybrid and multi-cloud setups are also significant benefits, making compliance simpler to manage and operational risk lower.
    What do you dislike about the product?
    What I detest about Check Point CloudGuard Network Security is how hard the initial setup and configuration can be, particularly in multi-cloud situations where rules must be fine-tuned for each platform. The user interface, although powerful, might be less intuitive than comparable cloud-native systems, resulting in a lengthier learning curve for novice admins. Licensing and cost control may also be difficult for firms that are fast expanding, since they need careful planning to minimize unforeseen charges. Furthermore, interaction with third-party monitoring and automation systems might be improved to streamline operations.
    What problems is the product solving and how is that benefiting you?
    Check Point CloudGuard Network Security is assisting us with the difficulty of safeguarding workloads and applications in hybrid and multi-cloud settings. It offers consistent visibility, enhanced threat protection, and unified security policies, reducing complexity while ensuring regulatory compliance. Data breaches are considerably reduced by defending against zero-day attacks, misconfigurations, and unauthorized access. The ability to incorporate security into cloud-native operations boosts agility, enabling teams to innovate without sacrificing security. Finally, it has helped us improve our overall security posture by simplifying cloud operations and lowering human overhead.
    Computer & Network Security

    Great NGFW for the cloud

    Reviewed on Aug 20, 2025
    Review provided by G2
    What do you like best about the product?
    Our overall experience with Check Point CloudGuard Network Security has been very positive, as the solution was easy to implement and integrates seamlessly with our cloud environment while maintaining the same reliability we are used to from on-prem clusters.
    What do you dislike about the product?
    I dislike that the upgrade process is not as streamlined as it could be, since it requires changes on both the firewalls and the cloud load balancers, which adds extra steps compared to on-prem upgrades.
    What problems is the product solving and how is that benefiting you?
    Check Point CloudGuard Network Security is solving the challenge of extending the same level of protection we have on-prem into our cloud environments. It was easy to implement, and the clusters work just like the on-prem appliances we’re already familiar with, which makes operations smooth for the team. The solution gives us superb logging to the SMS, so we have great visibility into traffic, and it integrates well with our existing workflows. The main benefit is that we can run our cloud workloads with the same level of security and confidence as on-prem, without adding unnecessary complexity.
    Stephano M.

    Seamless Cloud Integration Balances Reliability with High Deployment Complexity and Cost

    Reviewed on Aug 20, 2025
    Review provided by G2
    What do you like best about the product?
    Seamless integration with AWS and Azure, from GWLB to Autoscaling, it works perfectly.
    What do you dislike about the product?
    Architecture is complex to setup and to manage. High-skilled team required to manage the infrastructure.
    What problems is the product solving and how is that benefiting you?
    It centralizes east-west and north-south access control. It inspects traffic, is able to host VPN's, NATs the traffic (possibility of centralized ingress), IPS, Anti-bot and Anti-virus blades.
    Computer & Network Security

    Robust Cloud Security with Excellent Unified Management

    Reviewed on Jul 23, 2025
    Review provided by G2
    What do you like best about the product?
    The advanced threat prevention is truly best-in-class. We have deep visibility into our cloud traffic, and the ability to apply consistent, granular security policies across our hybrid and multi-cloud environments from a single console (Smart-1 Cloud) is a massive operational advantage.
    What do you dislike about the product?
    The initial learning curve can be steep for engineers not already familiar with the Check Point autoscaling ecosystem. Furthermore, the pricing structure can be complex to navigate, requiring careful planning to ensure cost-effectiveness, especially with dynamic workloads.
    What problems is the product solving and how is that benefiting you?
    CloudGuard solves our main security challenges by providing a single, unified management platform for our on-prem and multi-cloud (AWS, Azure) environments. This creates a consistent security posture, which reduces management overhead and simplifies compliance audits. Its advanced threat prevention, including IPS and sandboxing, protects our critical workloads from threats that native cloud tools cannot block. Finally, it gives us deep, granular visibility into all traffic flows, which is crucial for faster incident response and effective reporting.
    View all reviews