Listing Thumbnail

    CloudGuard Network Security with Threat Prevention and SandBlast

     Info
    Deployed on AWS
    Free Trial
    Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20) **Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.

    Overview

    Play video

    CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot.

    CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.

    The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.

    This CloudGuard Network Security gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.

    This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.

    The Security Management Server is not included in this offering. To manage CloudGuard Network Security Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ ).

    Highlights

    • Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Depending on your existing license, SandBlast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques).
    • Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed for the dynamic security requirements of cloud deployments, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment, while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
    • Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux Gaia 3.10

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    CloudGuard Network Security with Threat Prevention and SandBlast

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (112)

     Info
    • ...
    Dimension
    Cost/hour
    c6in.xlarge
    Recommended
    $1.27
    c6i.2xlarge
    $1.92
    c6i.24xlarge
    $19.93
    m7a.24xlarge
    $19.93
    c6i.12xlarge
    $10.89
    c5n.18xlarge
    $16.03
    c5d.large
    $1.06
    c5.large
    $1.06
    c6in.2xlarge
    $1.92
    c6i.4xlarge
    $3.56

    Vendor refund policy

    Terminate the instance at any given time to stop incurring charges.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:

    1. SSH password authentication is disabled in /etc/ssh/sshd_config
    2. For information regarding Firefox and Chrome refer to sk121373.

    Support

    Vendor support

    This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/  To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/ 

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Log Analysis
    Top
    10
    In Network Infrastructure
    Top
    10
    In Network Infrastructure, Security

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    5 reviews
    Insufficient data
    Insufficient data
    4 reviews
    Insufficient data
    Insufficient data
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Network Traffic Inspection
    Advanced multi-layered security inspection for traffic entering and leaving private subnets and between VPCs
    Threat Prevention Mechanisms
    Includes Firewall, IPS, Application Control, Antivirus, Anti-Bot, Threat Extraction, and Threat Emulation capabilities
    Cloud Integration
    Native integration with AWS services including GWLB, Cloud WAN, Outposts, GuardDuty, CloudWatch, Security Hub, Transit Gateway, CloudTrail, and VPC Flow Logs
    VPN Connectivity
    Secure SSL/TLS traffic inspection with IPsec VPN connectivity between AWS and enterprise networks, supporting traffic forwarding and SNI
    Deployment Flexibility
    Supports single gateway, high availability cluster, and auto-scaling group deployments using CloudFormation templates and automation tools
    Network Traffic Protection
    Advanced cloud-native firewall service powered by FortiOS and FortiGuard Labs threat intelligence for securing cloud network traffic
    Threat Intelligence
    AI-powered intrusion prevention (IPS), data leak prevention (DLP), and advanced filtering capabilities to block malicious traffic and potential security breaches
    Dynamic Policy Management
    Security policies that dynamically use cloud metadata tags to follow cloud workloads without requiring static IP updates
    Geo-Specific Security Control
    Enforcement of compliance policies through geo-IP blocking and traffic restrictions to/from specified countries
    Multi-Account Security Aggregation
    Capability to consolidate security across multiple VPCs and accounts within an AWS region using a single firewall instance
    Threat Prevention
    Advanced machine learning-powered inspection engine that detects known and zero-day threats including exploits, malware, spyware, and command and control attacks
    Web Security
    Inline machine learning-based web security engine for real-time detection of phishing, ransomware, and evasive web-based attacks
    File Analysis
    Proprietary cloud-based hypervisor for static and dynamic file-based threat detection using advanced sandbox analysis techniques
    Protocol Layer Security
    Comprehensive security coverage across network layers including DNS-layer attack prevention and network data exfiltration detection
    Traffic Visibility
    Complete application layer-7 traffic inspection and control with dynamic policy management based on AWS tags, application IDs, and user contexts

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.3
    22 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    14%
    82%
    5%
    0%
    0%
    22 AWS reviews
    |
    71 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    reviewer2751327

    Enables secure access and traffic control with reliable security features

    Reviewed on Sep 03, 2025
    Review provided by PeerSpot

    What is our primary use case?

    My main use case for Check Point CloudGuard Network Security  is that we're using it to filter inbound and outbound Azure  traffic from on-premises to Azure  and from Azure to the internet.

    I use it for filtering traffic between on-premises and Azure to secure an SAP application accessed from on-premises while the SAP is in Azure.

    What is most valuable?

    The best features Check Point CloudGuard Network Security  offers are security features, VPN capabilities, filtering, and IPS.

    I rely on IPS and access control the most because it controls access to on-premises and from Azure.

    Check Point CloudGuard Network Security has positively impacted my organization by making the network more secure and controlling the access to the applications.

    What needs improvement?

    I think Check Point CloudGuard Network Security is an ideal product, so I see no improvements needed.

    If I had to think of one area where it could be improved or made easier, I would say that support isn't very good and documentation sometimes is lacking.

    For how long have I used the solution?

    I have been using Check Point CloudGuard Network Security for four years.

    What do I think about the stability of the solution?

    Check Point CloudGuard Network Security is stable in my experience.

    What do I think about the scalability of the solution?

    Check Point CloudGuard Network Security's scalability is good because we can put the firewalls in VM scale sets and scale.

    How are customer service and support?

    The customer support is not good.

    How would you rate customer service and support?

    Neutral

    Which solution did I use previously and why did I switch?

    I did not previously use a different solution before Check Point CloudGuard Network Security.

    How was the initial setup?

    My experience with pricing, setup cost, and licensing for Check Point CloudGuard Network Security is that pricing was good, the initial setup is easy, and licensing is a bring your own license, so it's good to bring licenses already from on-premises.

    Which other solutions did I evaluate?

    Before choosing Check Point CloudGuard Network Security, I evaluated other options, including Fortinet.

    What other advice do I have?

    My advice to others looking into using Check Point CloudGuard Network Security is to deploy with scale set.

    I would rate Check Point CloudGuard Network Security an eight out of ten because it's mostly complete and the support is a minor downside.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Microsoft Azure
    reviewer2753559

    Improved security posture and streamlined compliance while user interface could be more intuitive

    Reviewed on Aug 29, 2025
    Review from a verified AWS customer

    What is our primary use case?

    The main use case for Check Point CloudGuard Network Security  is for perimeter security and analyzing traffic in the network environment.

    Check Point CloudGuard Network Security  offers deep visibility into traffic, detailed logs, and real-time monitoring to see what applications, users, and devices are communicating on the network. Apart from that, it prevents lateral movement, stops phishing attacks, and mitigates DDoS. The main use case is to provide protection for a hybrid environment such as on-prem and multi-cloud by having consistent security. It enforces zero trust access to critical applications.

    What is most valuable?

    The best features that Check Point CloudGuard Network Security offers include deep visibility into traffic, detailed logs, and real-time monitoring to see what applications, users, and devices are communicating on the network. Apart from that, it prevents lateral movement, stops phishing attacks, and mitigates DDoS. The solution provides protection for hybrid environments such as on-prem and multi-cloud by having consistent security and enforces zero trust access to critical applications.

    The best feature is unified threat prevention, including IPS, antivirus, anti-bot, URL filtering, and Sandboxing in one platform. It provides seamless integration with AWS , Azure , and GCP. Furthermore, it offers centralized management from which we can manage security policies across cloud and on-prem solutions in a single console, known as Smart Console. From this, we can implement automation and DevOps support, as well as infrastructure as code security templates for faster deployment.

    Cloud-native integration automatically adapts to changes in our AWS , Azure , or GCP environments; for instance, if a new workload is spun up, policies are applied instantly. Centralized management offers one console for both on-prem and multi-cloud environments. Additionally, automation and DevOps support allow security policies to be deployed as code and integrated into CI/CD pipelines.

    Check Point CloudGuard Network Security has positively impacted our organization by improving our security posture. We have seen a sharp reduction in successful intrusion attacks because of its unified threat prevention, along with greater visibility and control. CloudGuard gave us full visibility into east-west traffic inside our local or cloud environment. Previously, we monitored north-south traffic, which helped detect unauthorized lateral movement early. It has enabled faster incident response and stronger compliance with standards such as PCI DSS, HIPAA, and GDPR, which made audits smoother and helped us maintain continuous compliance in the cloud.

    What needs improvement?

    Areas for improvement for Check Point CloudGuard Network Security include user interface and usability, pricing and licensing, integration with third-party tools, reporting and analytics, depth of automation, and support.

    In terms of user interface and usability, the Smart Console UI is feature-rich; however, for new admins, navigation is not always intuitive, and log search feels clunky compared to SIM tools. Policy editing could be faster with bulk or drag-and-drop options, and dashboards need more customization. Streamlining these would make day-to-day use much better.

    For how long have I used the solution?

    I have been using Check Point CloudGuard Network Security for the past one year.

    What do I think about the stability of the solution?

    Check Point CloudGuard Network Security is stable.

    How are customer service and support?

    Customer support for Check Point CloudGuard Network Security is average. I would rate the customer support as six on a scale of 1 to 10.

    How would you rate customer service and support?

    Neutral

    What was our ROI?

    I have seen a return on investment from using Check Point CloudGuard Network Security in both money and time saved.

    What's my experience with pricing, setup cost, and licensing?

    My experience with the pricing, setup cost, and licensing for Check Point CloudGuard Network Security is that it was good.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Amazon Web Services (AWS)
    Idrees Zargar

    Network security automation and management improve productivity and save time

    Reviewed on Jun 16, 2025
    Review from a verified AWS customer

    What is our primary use case?

    My main use case for Check Point CloudGuard  Network Security is network security for my network tunnel.

    I have additional examples about my main use cases; it helps us with overall network security.

    How has it helped my organization?

    Check Point Cloud Guard provides a unified security management platform for consistent policy enforcement across all environments. Which makes scalability easy & decreases overall TSO.

    What is most valuable?

    The best features Check Point CloudGuard  Network Security offers include automation of network security and unified security management, which stand out to me because they streamline our operations.

    The automation and unified security management have helped me significantly; it saves me eighty percent of the time and reduces errors.

    Check Point CloudGuard Network Security has positively impacted my organization, leading to better productivity. It has increased our productivity.

    It increased productivity by allowing my team to spend less time on manual tasks, which helps us to focus on other projects.

    What needs improvement?

    Check Point CloudGuard Network Security can make deployment and configuration less complex.

    For how long have I used the solution?

    I have been using Check Point CloudGuard Network Security for around one year.

    What do I think about the stability of the solution?

    Check Point CloudGuard Network Security is stable.

    What do I think about the scalability of the solution?

    The scalability of Check Point CloudGuard Network Security is good.

    How are customer service and support?

    The customer support is good.

    I would rate the customer support an eight on a scale of one to ten.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    I did not previously use any other solution like this.

    How was the initial setup?

    The initial setup with Check Point CloudGuard Network Security is straightforward, with no complications.

    What was our ROI?

    I am still calculating the return on investment; it has only been one year, so there are no answers right now.

    What's my experience with pricing, setup cost, and licensing?

    My experience with pricing, setup costs, and licensing is satisfactory.

    Which other solutions did I evaluate?

    I did not evaluate other options before choosing Check Point CloudGuard Network Security.

    What other advice do I have?

    My thoughts about the metering and billing experience are that it's fair and okay, though not very clear.

    My advice to others looking into using Check Point CloudGuard Network Security is to go for it.

    I chose that number because of the performance.

    I have no additional thoughts about Check Point CloudGuard Network Security before we wrap up.

    On a scale of one to ten, I rate Check Point CloudGuard Network Security an eight.

    Which deployment model are you using for this solution?

    Public Cloud
    James Arscott

    User-friendly interface and reliable security empower financial institutions

    Reviewed on Mar 13, 2025
    Review provided by PeerSpot

    What is our primary use case?

    I am based in Jamaica for the most part. Not a lot of people use Check Point CloudGuard Network Security  due to pricing issues, but most banks still use it.

    What is most valuable?

    I think it is secure and user-friendly. The interface is easy to understand and the Check Point CloudGuard Network Security  history assures me of its trustworthiness.

    What needs improvement?

    They could improve the documentation. The interface is fine for me since I have been using it for some time.

    For how long have I used the solution?

    I have been using network security from around 2003 or 2004.

    What was my experience with deployment of the solution?

    Deployment usually takes about two days depending on the network.

    What do I think about the stability of the solution?

    I have not experienced any issues with stability such as lagging, crashing, or downtime.

    What do I think about the scalability of the solution?

    The scalability is fine. In Jamaica, the networks tend to be relatively small.

    How are customer service and support?

    I have not had to contact technical support or customer support for Check Point CloudGuard Network Security specifically, but I have contacted them for other Check Point products.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    I work with Cisco and FortiGate . FortiGate  is popular in Jamaica, partly due to pricing. Users often choose cheaper options even if Check Point is considered better.

    How was the initial setup?

    The initial setup is fine. It is not difficult.

    What about the implementation team?

    I usually work with a team of about two or three people for deployment, totaling three or four including me.

    What's my experience with pricing, setup cost, and licensing?

    Pricing in Jamaica is a major issue, with users often citing it as a reason for not using Check Point.

    Which other solutions did I evaluate?

    I have experience with Cisco and FortiGate solutions.

    What other advice do I have?

    I advise new users to carefully look at the documentation and do their homework before starting deployments. Proper planning and preparation, supported by the documentation, are crucial. I would rate the solution about nine out of ten.
    reviewer2648223

    Enhanced network security with improved visibility and ease of management

    Reviewed on Feb 07, 2025
    Review provided by PeerSpot

    What is our primary use case?

    We use Check Point CloudGuard Network Security  to replace an Azure Firewall , securing the network flow in our organization.

    What is most valuable?

    The URL filtering provides a lot of added value compared to the Azure Firewall . It is easier to use and offers much more visibility on the network activities. It helps us manage our security operations by reusing on-prem solutions with the cloud, therefore improving ease of use.

    What needs improvement?

    The reporting needs enhancement. Currently, we are not always aware of the gateways' status, like CPU and RAM usage. It would be beneficial to have a report that manages everything and gives an overall view of what is going on.

    For how long have I used the solution?

    I have been using it for six to ten months.

    What do I think about the stability of the solution?

    I have experienced a few issues where connectivity is lost temporarily, however, it does not affect traffic processing. It is more about not having management information for a few seconds.

    What do I think about the scalability of the solution?

    The scalability is really good and relies totally on CloudGuard, whether it is on Azure  or AWS . At least on Azure , it works fine.

    How are customer service and support?

    The customer service is good. They helped me with the few issues I had, meeting my expectations. Their support for traditional security projects is good, and I found the same support quality for cloud projects.

    How would you rate customer service and support?

    Neutral

    Which solution did I use previously and why did I switch?

    I have used solutions for on-prem security management, yet not for the cloud.

    How was the initial setup?

    The initial deployment was easy, taking about a week.

    What other advice do I have?

    I rate the overall solution an eight out of ten. It would be ideal to have improved reporting features for a comprehensive overview.

    Which deployment model are you using for this solution?

    Hybrid Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Microsoft Azure
    View all reviews