Sold by: Check Point Software TechnologiesÂ
Deployed on AWS
AWS Free Tier
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation.
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
4.5
Overview
Video
Video 1
Video
Product video
CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot.
CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.
This CloudGuard Network Security gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.
This BYOL distributed security gateway is managed from a central Security Management Server, which provides consistent security policy management, enforcement, and reporting across AWS and hybrid deployments within a single pane of glass.
The Security Management Server is not included in this offering. To manage CloudGuard Network Security Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/Â ).
Highlights
- Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Depending on your existing license, SandBlast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques).
- Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed to meet dynamic security requirements, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment (e.g. using AWS CloudFormation), while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
- Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Please see seller website for refund details.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Resources
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/Â
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
e92plus Technical Services provide dedicated Check Point CloudGuard consultancy services delivered by our team of experienced vendor-accredited engineers.
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Are you looking for an automated Web Application Firewall (WAF) with precise prevention and no management overheads? CloudGuard WAF delivers AI-enabled Web Application and API protection.
Customer reviews
Animation
Consistent Cloud Security, Easy Setup
Reviewed on Dec 01, 2025
Review provided by G2
What do you like best about the product?
I appreciate that Check Point CloudGuard Network Security offers me consistent and automated security, which is essential for managing threats in hybrid and multicloud environments. The product's ease of setup makes it accessible for any user, allowing me to quickly implement and start protecting my cloud network without hassle. This ease of use combined with its robust security features gives me confidence in managing advanced threats and maintaining a secure multi-cloud infrastructure.
What do you dislike about the product?
I think there is room for improvement in Check Point CloudGuard Network Security, particularly concerning hybrid cloud security and ensuring consistency in management across public and private clouds.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to protect my cloud network from advanced threats and ensure consistent security policies across hybrid and multicloud environments with automated security.
Accounting
Strong Threat Prevention, Seamless Integration
Reviewed on Nov 30, 2025
Review provided by G2
What do you like best about the product?
I really appreciate Check Point CloudGuard Network Security for its strong threat prevention, which is crucial in protecting our cloud workloads. It effectively blocks cloud-based attacks, which adds an extra layer of security beyond what native cloud controls offer. I also value how seamlessly it integrates into our existing Check Point management stack. This smooth integration not only saves us a lot of time but also helps in maintaining consistent security policies across our operations. The ease of setup, especially for users with experience, is another aspect that I find commendable. Overall, these features significantly contribute to the product’s effectiveness and enhance our cybersecurity framework.
What do you dislike about the product?
The cost of Check Point CloudGuard Network Security can increase significantly as your environment grows. Because traffic inspection—particularly for encrypted data or east-west traffic within cloud networks, as well as inter-region traffic—requires both compute resources and bandwidth, an increase in traffic volume will naturally lead to higher expenses.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to secure our cloud workloads effectively, blocking cloud-based attacks. Its strong threat prevention enhances security beyond native cloud controls, and seamless integration with Check Point management saves time and ensures consistent policies.
Eliezer P.
Real-Time Visibility and Efficient Comprehensive Protection
Reviewed on Nov 25, 2025
Review provided by G2
What do you like best about the product?
I love the real-time visibility that Check Point CloudGuard Network Security provides me regarding cloud security. This allows me to respond effectively to incidents, which is crucial for protecting our data and operations. I also greatly value the comprehensive protection it offers for cloud environments. I like it because it covers all the security aspects I need, ensuring that all our areas are adequately protected. These features make this tool a vital part of our IT security strategy.
What do you dislike about the product?
Integration with more cloud platforms.
What problems is the product solving and how is that benefiting you?
I use Check Point CloudGuard Network Security to protect against threats and network attacks. It provides me with real-time visibility and comprehensive protection, allowing me to respond effectively to incidents and secure all aspects of cloud security.
Aaron M.
Worry-Free Operation Delivers Total Peace of Mind
Reviewed on Nov 25, 2025
Review provided by G2
What do you like best about the product?
I really like how it does not need much set up. It is great for security and provides simple solutions to a complex problem. It has been a great addition.
What do you dislike about the product?
I have not experienced any downsides to the product. It has functioned as described and has become part of every day work. When there is an issue, it is quickly corrected.
What problems is the product solving and how is that benefiting you?
It is helping staff feel more secure when online. It is also supporting our growth. It has worked to improve efficiency and overall productivity. We do not worry about online security.
Sujit S.
Powerful Cloud Security with Centralized Management, Minor Room for Improvement
Reviewed on Nov 20, 2025
Review provided by G2
What do you like best about the product?
I like Check Point CloudGuard because it provides strong, advanced threat protection that goes beyond native cloud firewalls. It also gives a single, centralized console to manage security across multiple clouds. Policies are dynamic and update automatically using tags and identities, which reduces manual work. Overall, it makes cloud security simpler, consistent, and more powerful.
What do you dislike about the product?
I dislike that Check Point CloudGuard can be complex to deploy and manage, especially for beginners. It also requires higher skill levels compared to native cloud firewalls. Licensing and costs can be confusing and sometimes expensive for small teams. Updates and troubleshooting often depend heavily on Check Point TAC, which can slow things down.
What problems is the product solving and how is that benefiting you?
CloudGuard helps solve the challenge of securing workloads across multiple clouds with one consistent policy. It protects against advanced threats that native cloud firewalls can’t block. It also automates security using tags and identities, reducing manual work. Overall, it improves visibility, strengthens protection, and saves a lot of operational time.