CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot, Threat Extraction and Threat Emulation.
CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management.
CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency.
The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.
This offering will be deployed as a single "All-In-One" CloudGuard Network Security gateway and Security Management Server via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.
This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.

The Security Management Server is included in this "All-In-One" offering; there is no need to choose one of the Check Point Security Management offers.

To maintain the highest quality and security of our management solutions, Check Point recommends installing the latest recommended Jumbo Hotfix, especially after the initial deployment.