Sold by: Check Point Software Technologies
Deployed on AWS
Free Trial
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Overview
Video
Video 1
Video
Product video
CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot.
CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.
This CloudGuard Network Security gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.
This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.
The Security Management Server is not included in this offering. To manage CloudGuard Network Security Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ ).
Highlights
- Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Depending on your existing license, SandBlast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques).
- Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed for the dynamic security requirements of cloud deployments, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment, while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
- Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Free trial
Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Cost/hour |
|---|---|
c6in.xlarge Recommended | $0.89 |
m6a.4xlarge | $3.56 |
c6in.4xlarge | $3.56 |
c5d.24xlarge | $19.93 |
c5d.12xlarge | $10.89 |
c5d.9xlarge | $8.34 |
m7a.4xlarge | $3.56 |
c7i-flex.xlarge | $0.89 |
c5.9xlarge | $8.34 |
c5n.2xlarge | $1.78 |
Vendor refund policy
Terminate the instance at any given time to stop incurring charges.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Resources
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Check Point Software Technologies
By Palo Alto Networks
Top
10
In Log Analysis
Top
10
In Network Infrastructure
Top
10
In Network Infrastructure, Security
Sentiment is AI generated from actual customer reviews
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Network Traffic Inspection
Advanced multi-layered security inspection for traffic entering and leaving private subnets and between VPCs
Threat Prevention Mechanisms
Includes Firewall, IPS, Application Control, Antivirus, Anti-Bot, Threat Extraction, and Threat Emulation capabilities
Cloud Integration
Native integration with AWS services including GWLB, Cloud WAN, Outposts, GuardDuty, CloudWatch, Security Hub, Transit Gateway, CloudTrail, and VPC Flow Logs
VPN Connectivity
Secure SSL/TLS traffic inspection with IPsec VPN connectivity between AWS and enterprise networks, supporting traffic forwarding and SNI
Deployment Flexibility
Supports single gateway, high availability cluster, and auto-scaling group deployments using CloudFormation templates and automation tools
Network Traffic Protection
Advanced cloud-native firewall service powered by FortiOS and FortiGuard Labs threat intelligence for securing cloud network traffic
Threat Intelligence
AI-powered intrusion prevention (IPS), data leak prevention (DLP), and advanced filtering capabilities to block malicious traffic and potential security breaches
Dynamic Policy Management
Security policies that dynamically use cloud metadata tags to follow cloud workloads without requiring static IP updates
Geo-Specific Security Control
Enforcement of compliance policies through geo-IP blocking and traffic restrictions to/from specified countries
Multi-Account Security Aggregation
Capability to consolidate security across multiple VPCs and accounts within an AWS region using a single firewall instance
Threat Prevention
Advanced machine learning-powered inspection engine that detects known and zero-day threats including exploits, malware, spyware, and command and control attacks
Web Security
Inline machine learning-based web security engine for real-time detection of phishing, ransomware, and evasive web-based attacks
File Analysis
Proprietary cloud-based hypervisor for static and dynamic file-based threat detection using advanced sandbox analysis techniques
Protocol Layer Security
Comprehensive security coverage across network layers including DNS-layer attack prevention and network data exfiltration detection
Traffic Visibility
Complete application layer-7 traffic inspection and control with dynamic policy management based on AWS tags, application IDs, and user contexts
Standard contract
No
No
No
Customer reviews
4.3
20 ratings
20 AWS reviews
|
193 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Etsub A.
Defending the Cloud: An In-Depth Review of Check Point CloudGuard Network Security
Reviewed on May 15, 2025
Review provided by G2
What do you like best about the product?
1. Offers advanced threat prevention capabilities, safeguarding the cloud environments from a variety of threats
2. Designed to scale with the cloud workloads, ensuring that security measures grow alongside your business needs
3. Provides detailed insights and visibility into cloud security posture
2. Designed to scale with the cloud workloads, ensuring that security measures grow alongside your business needs
3. Provides detailed insights and visibility into cloud security posture
What do you dislike about the product?
1. Initial setup and configuration can be complex
2. Higher cost
3. Limited customization
2. Higher cost
3. Limited customization
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard Network Security addresses several key problems:
1. Protect against threats specific to cloud environments
2. Provides comprehensive visibility into cloud resources and security posture
3. Adapts to dynamic cloud workloads, ensuring consistent security as applications scale or change
1. Protect against threats specific to cloud environments
2. Provides comprehensive visibility into cloud resources and security posture
3. Adapts to dynamic cloud workloads, ensuring consistent security as applications scale or change
Nasseer q.
Checkpoint CloudGuard Network Security: Powerful Protection for Cloud Environments
Reviewed on May 07, 2025
Review provided by G2
What do you like best about the product?
What I like best about Check Point CloudGuard Network Security is its ability to provide consistent, advanced threat protection across multi-cloud environment. It offers seamless integration with major cloud providers, ensuring comprehensive visibility and control. Additionally its automated security policies help reduce manual efforts while enhancing overall security posture.
What do you dislike about the product?
Setting up and configuration of Checkpoint CloudGuard security can be complex particularly if you have limited cloud security expertise.
What problems is the product solving and how is that benefiting you?
Checkpoint CloudGuard Network Security solves the problem of securing cloud infrastructure by providing advanced threat prevention and traffic inspection across hybrid cloud environments. It benefits us by ensuring that cloud workloads are protected from cyberattacks maintaining compliance and simplifying security management with automated policy enforcement and centralized visibility.
Computer & Network Security
Best autoscaling solution for multiple CSP
Reviewed on Apr 03, 2025
Review provided by G2
What do you like best about the product?
Autoscaling is super efficient and easy to configure.
Deploys actually take less than 2 days, even less with terraform deployments.
Support is actually really fast, even on the lowest severity.
I manage cloudguards in aws, azure, gcp, oci every day, and i am completely satisfied.
Deploys actually take less than 2 days, even less with terraform deployments.
Support is actually really fast, even on the lowest severity.
I manage cloudguards in aws, azure, gcp, oci every day, and i am completely satisfied.
What do you dislike about the product?
We need c2s and s2s vpns on A/A scalesets.
What problems is the product solving and how is that benefiting you?
Check Point CloudGuard is a lifesaver for our dynamic cloud environment. The auto-scaling feature automatically adjusts security coverage as traffic volumes change, eliminating those throughput bottlenecks we used to face. When traffic spikes, it scales up instantly, and scales down when things quiet down. This means we're never overpaying for unused capacity or scrambling when traffic surges.
James Arscott
User-friendly interface and reliable security empower financial institutions
Reviewed on Mar 13, 2025
Review provided by PeerSpot
What is our primary use case?
I am based in Jamaica for the most part. Not a lot of people use Check Point CloudGuard Network Security due to pricing issues, but most banks still use it.
What is most valuable?
I think it is secure and user-friendly. The interface is easy to understand and the Check Point CloudGuard Network Security history assures me of its trustworthiness.
What needs improvement?
They could improve the documentation. The interface is fine for me since I have been using it for some time.
For how long have I used the solution?
I have been using network security from around 2003 or 2004.
What was my experience with deployment of the solution?
Deployment usually takes about two days depending on the network.
What do I think about the stability of the solution?
I have not experienced any issues with stability such as lagging, crashing, or downtime.
What do I think about the scalability of the solution?
The scalability is fine. In Jamaica, the networks tend to be relatively small.
How are customer service and support?
I have not had to contact technical support or customer support for Check Point CloudGuard Network Security specifically, but I have contacted them for other Check Point products.
How would you rate customer service and support?
Positive
Which solution did I use previously and why did I switch?
I work with Cisco and FortiGate . FortiGate is popular in Jamaica, partly due to pricing. Users often choose cheaper options even if Check Point is considered better.
How was the initial setup?
The initial setup is fine. It is not difficult.
What about the implementation team?
I usually work with a team of about two or three people for deployment, totaling three or four including me.
What's my experience with pricing, setup cost, and licensing?
Pricing in Jamaica is a major issue, with users often citing it as a reason for not using Check Point.
Which other solutions did I evaluate?
I have experience with Cisco and FortiGate solutions.
What other advice do I have?
I advise new users to carefully look at the documentation and do their homework before starting deployments. Proper planning and preparation, supported by the documentation, are crucial. I would rate the solution about nine out of ten.
reviewer2648223
Enhanced network security with improved visibility and ease of management
Reviewed on Feb 07, 2025
Review provided by PeerSpot
What is our primary use case?
We use Check Point CloudGuard Network Security to replace an Azure Firewall , securing the network flow in our organization.
What is most valuable?
The URL filtering provides a lot of added value compared to the Azure Firewall . It is easier to use and offers much more visibility on the network activities. It helps us manage our security operations by reusing on-prem solutions with the cloud, therefore improving ease of use.
What needs improvement?
The reporting needs enhancement. Currently, we are not always aware of the gateways' status, like CPU and RAM usage. It would be beneficial to have a report that manages everything and gives an overall view of what is going on.
For how long have I used the solution?
I have been using it for six to ten months.
What do I think about the stability of the solution?
I have experienced a few issues where connectivity is lost temporarily, however, it does not affect traffic processing. It is more about not having management information for a few seconds.
What do I think about the scalability of the solution?
The scalability is really good and relies totally on CloudGuard, whether it is on Azure or AWS . At least on Azure , it works fine.
How are customer service and support?
The customer service is good. They helped me with the few issues I had, meeting my expectations. Their support for traditional security projects is good, and I found the same support quality for cloud projects.
How would you rate customer service and support?
Neutral
Which solution did I use previously and why did I switch?
I have used solutions for on-prem security management, yet not for the cloud.
How was the initial setup?
The initial deployment was easy, taking about a week.
What other advice do I have?
I rate the overall solution an eight out of ten. It would be ideal to have improved reporting features for a comprehensive overview.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure