Sold by: Check Point Software Technologies
Deployed on AWS
Free Trial
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
4.4
Overview
Video
Video 1
Video
Product video
CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot.
CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.
This CloudGuard Network Security gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.
This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.
The Security Management Server is not included in this offering. To manage CloudGuard Network Security Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ ).
Highlights
- Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Depending on your existing license, SandBlast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques).
- Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed for the dynamic security requirements of cloud deployments, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment, while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
- Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $1.27 |
r7i.large | $1.06 |
m8i-flex.4xlarge | $3.56 |
r7i.8xlarge | $7.94 |
r7i.48xlarge | $35.79 |
r7iz.metal-32xl | $24.41 |
r6i.16xlarge | $14.23 |
m5.4xlarge | $3.56 |
m6i.xlarge | $1.27 |
r5.24xlarge | $19.93 |
Vendor refund policy
Terminate the instance at any given time to stop incurring charges.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Resources
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Palo Alto Networks
Top
10
In Log Analysis
Top
10
In Network Infrastructure
Top
10
In Network Infrastructure, Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Advanced Threat Prevention Engine
Integrated security features including Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot with SandBlast capabilities for Threat Extraction and Threat Emulation using threat sandboxing technology
SSL/TLS Traffic Inspection
SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside encrypted traffic
Multi-directional Network Segmentation
Advanced threat prevention inspection for North-South traffic entering and leaving private subnets in VPC as well as East-West traffic between VPCs with support for network segmentation and AWS Transit Gateway
Cloud-Native Deployment Architecture
Support for single gateway, high availability cluster, or Auto Scaling group deployment via CloudFormation templates and automation tools such as Ansible and Terraform with integration to AWS GWLB, AWS Cloud WAN, AWS Outposts and AWS Transit Gateway
Intrusion Prevention System
Intrusion prevention (IPS) capabilities to detect and block malicious network traffic and attacks.
Data Leak Prevention
Data Leak Prevention (DLP) functionality to prevent unauthorized data exfiltration and breaches.
Geo-IP Blocking
Geo-specific policy enforcement that blocks traffic to and from specified countries based on geographic location.
AI-Powered Threat Intelligence
Advanced filtering powered by AI-driven threat intelligence from FortiGuard Labs to identify and block risky connections.
Dynamic Policy Management
Dynamic security policies that use cloud metadata tags to automatically follow cloud workloads without requiring static IP updates.
Advanced Threat Prevention
Safeguards network from known and zero-day threats including exploits, malware, spyware, and command and control attacks using researcher-grade signatures and machine learning inspection engine.
Advanced URL Filtering
Defends against phishing, ransomware, and web-based attacks using inline machine learning-based web security engine with real-time detection of previously unseen threats and dynamic policy controls.
File-Based Threat Detection
Identifies file-based threats through inline static and dynamic analysis in the cloud with proprietary hypervisor technology for detection of sandbox-resistant malware.
DNS Security
Detects and prevents sophisticated DNS-layer network attacks and data exfiltration attempts.
Dynamic Policy Management
Applies policy definitions to cloud assets based on AWS tags, Application IDs, User IDs, geographies, or zones with automatic adaptation to infrastructure changes without manual intervention.
Standard contract
No
No
No
Customer reviews
Dino B.
Effective Threat Prevention, Complex Setup
Reviewed on Feb 03, 2026
Review provided by G2
What do you like best about the product?
I like the quite detailed traffic and threat logs, which made troubleshooting much easier for me. Also, it solved the problem of serving as quite efficient threat prevention.
What do you dislike about the product?
Licensing clarity could use quite a lot more work, honestly. SmartConsole feels quite heavy and slow than what one would expect, so I think if you could make it somehow lighter and more cloud optimized. Initial setup was overly complex. I would definitely not recommend it to anyone new to the industry or using products like these. I am positive the complexities would deter them from using it.
What problems is the product solving and how is that benefiting you?
I've used Check Point CloudGuard Network Security primarily as a firewall in cloud environments, mainly to control traffic on AWS and Azure. It efficiently solves the problem of threat prevention.
Computer & Network Security
Centralized Multi-Cloud Security, But There’s Room to Improve
Reviewed on Jan 26, 2026
Review provided by G2
What do you like best about the product?
What I like most about Check Point CloudGuard Network Security is how it delivers consistent, enterprise-grade security controls across multi-cloud and hybrid environments, while still staying highly scalable and automated. I also value its deep integration with cloud-native services, along with centralized management that makes it easier to maintain visibility, enforce policies, and respond to incidents in a more streamlined way.
What do you dislike about the product?
What I dislike is that the initial setup and configuration can feel complex, especially for teams that are new to Check Point or to cloud security architectures. On top of that, the cost and licensing model can be difficult to optimize for smaller environments or for rapidly changing cloud workloads, which adds another layer of challenge when trying to keep things efficient.
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Network Security addresses the challenge of securing dynamic cloud environments by delivering unified visibility, advanced threat prevention, and consistent security policies across multiple cloud platforms. For me, this translates into simpler day-to-day security management, a lower risk of misconfigurations, and more time to focus on detection and response instead of maintaining complex security architectures.
Kevin H.
Straightforward Security Tool, Needs Better Support
Reviewed on Jan 11, 2026
Review provided by G2
What do you like best about the product?
I like that Check Point CloudGuard Network Security is straight to the point when securing our customers' network security. The initial setup was pretty straightforward, making it easier to deploy at work.
What do you dislike about the product?
The support is kind of bad. Sometimes the workers don't know their own product properly.
What problems is the product solving and how is that benefiting you?
It helps us secure customer's network security.
Pedro Leão
Cloud security has reduced alerts and improves real-time protection for critical workloads
Reviewed on Dec 23, 2025
Review from a verified AWS customer
What is our primary use case?
My main use case for Check Point CloudGuard Network Security has been securing cloud network traffic, and I mainly rely on it to protect workloads in the cloud and enforce consistent security policies across cloud environments.
A quick example of how I use Check Point CloudGuard Network Security to protect my cloud workloads is by inspecting inbound traffic to public-facing services; recently, it blocked suspicious scans and unauthorized access attempts before they could reach my cloud applications.
What is most valuable?
The best features Check Point CloudGuard Network Security offers include cloud-native threat prevention that inspects traffic in real time, consistent policy enforcement across multi-cloud environments, and automation and integration with cloud platforms for easier deployment.
The feature that made the biggest difference for me is the real-time threat prevention because it stops malicious traffic and risky behavior before it ever reaches my cloud workloads. This has significantly reduced actual incidents and false positives that I need to chase.
Check Point CloudGuard Network Security has positively impacted my organization by reducing successful attacks and risky cloud traffic, meaning fewer incidents reach production systems. It has also cut down the time my team spends troubleshooting threats, letting us focus more on proactive cloud security, which has freed up my time.
Since deploying Check Point CloudGuard Network Security, I have seen about a 40% drop in cloud network alerts, which has cut down noise and false positives, helping my team save roughly 25% of time previously spent on manual investigation and threat cleanup.
What needs improvement?
I think the initial setup of Check Point CloudGuard Network Security can be simpler; onboarding could be more intuitive for new cloud teams, and it could also have more flexible custom reporting and better documentation examples.
For how long have I used the solution?
I have been using Check Point CloudGuard Network Security for about a year.
What do I think about the stability of the solution?
Check Point CloudGuard Network Security is stable.
What do I think about the scalability of the solution?
The scalability of Check Point CloudGuard Network Security has been very good; it handles growth in workloads and traffic smoothly, and the policies scale across accounts without performance issues.
How are customer service and support?
I think the customer support for Check Point CloudGuard Network Security has been responsive and helpful.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I previously relied mainly on AWS Native security controls, and I switched to Check Point CloudGuard Network Security because I needed stronger threat prevention, better visibility, and centralized policy management, as the AWS Native security controls were too limited for me, necessitating a solution with greater visibility.
How was the initial setup?
I think the initial setup of Check Point CloudGuard Network Security can be simpler; onboarding could be more intuitive for new cloud teams, and it could also have more flexible custom reporting and better documentation examples.
What was our ROI?
I have seen a return on investment from Check Point CloudGuard Network Security, with a clear impact reflected in a 40% reduction in cloud network alerts and about 25% less time spent by my team on manual investigations and threat analysis. This means less operational overhead and more time for proactive cloud projects, translating to measurable cost savings and better efficiency overall.
What's my experience with pricing, setup cost, and licensing?
My experience with pricing, setup cost, and licensing for Check Point CloudGuard Network Security was a bit complex to map out at first; the setup cost was fair, especially through the AWS Marketplace , though planning the right license levels took some initial effort, so overall, it feels like good value for the level of cloud protection I get.
Which other solutions did I evaluate?
I evaluated other solutions, including Palo Alto, the AWS Native Controls, and Fortinet.
Compared to Palo Alto, AWS Native Controls, and Fortinet, Check Point CloudGuard Network Security was easier to integrate with my AWS environment and roll out consistent policies across accounts, so the day-to-day ops felt quicker. Compared to AWS Native, it is more feature-rich, and versus Palo Alto, it is similar in capability but slightly friendlier for multi-cloud automation.
What other advice do I have?
Check Point CloudGuard Network Security provides me with unified security management across my cloud and hybrid environments, and having a single console for policies and visibility simplifies operations, reduces errors, and makes it much easier to manage security consistently as I scale.
I utilize Check Point CloudGuard Network Security alongside other Check Point products like Check Point Quantum Force and Harmony Endpoints, which integrate through a shared management and threat intelligence layer, giving me consistent visibility and protection across cloud, network, and endpoints.
My advice to others looking into using Check Point CloudGuard Network Security is to plan your cloud architecture and policies early and start with a phased rollout.
I would rate Check Point CloudGuard Network Security an eight on a scale of one to ten because I think there is always room to be better.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
NIKHIL G.
A best tool for cloud network security
Reviewed on Dec 18, 2025
Review provided by G2
What do you like best about the product?
Cloud guard helps me clearly see and control cloud network traffic from one place, which makes managing security much easy and simpler this is the best thing about cloud guard
What do you dislike about the product?
It simplifies cloud network security by giving better visibility and reducing the actual effort needed to monitor traffic security which i don't like about the network security
What problems is the product solving and how is that benefiting you?
It helps secure cloud workloads by controlling traffic and avoiding manual security checks by enabling the network security polices which improves the monitoring