Listing Thumbnail

    CloudGuard Network Security with Threat Prevention and SandBlast

     Info
    Free Trial
    Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
    Listing Thumbnail

    CloudGuard Network Security with Threat Prevention and SandBlast

     Info

    Overview

    Play video

    CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot.

    CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.

    The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.

    This CloudGuard Network Security gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.

    This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.

    The Security Management Server is not included in this offering. To manage CloudGuard Network Security Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/ ).

    Highlights

    • Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Depending on your existing license, SandBlast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques).
    • Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed for the dynamic security requirements of cloud deployments, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment, while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
    • Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux Gaia 3.10

    Typical total price

    This estimate is based on use of the seller's recommended configuration (c5.xlarge) in the US East (N. Virginia) Region. View pricing details

    $1.44/hour

    Pricing

    Free trial

    Try this product at no cost for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    CloudGuard Network Security with Threat Prevention and SandBlast

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covering your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (107)

     Info
    • ...
    Instance type
    Product cost/hour
    EC2 cost/hour
    Total/hour
    m5.large
    $1.06
    $0.096
    $1.156
    m5.xlarge
    $1.27
    $0.192
    $1.462
    m5.2xlarge
    $1.92
    $0.384
    $2.304
    m5.4xlarge
    $3.64
    $0.768
    $4.408
    m6i.large
    $1.06
    $0.096
    $1.156
    m6i.xlarge
    $1.27
    $0.192
    $1.462
    m6i.2xlarge
    $1.92
    $0.384
    $2.304
    m6i.4xlarge
    $3.64
    $0.768
    $4.408
    m6i.8xlarge
    $7.42
    $1.536
    $8.956
    m6i.12xlarge
    $10.18
    $2.304
    $12.484

    Additional AWS infrastructure costs

    Type
    Cost
    EBS General Purpose SSD (gp2) volumes
    $0.10/per GB/month of provisioned storage

    Vendor refund policy

    Terminate the instance at any given time to stop incurring charges.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:

    1. SSH password authentication is disabled in /etc/ssh/sshd_config
    2. For information regarding Firefox and Chrome refer to sk121373.

    Support

    Vendor support

    This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/  To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/ 

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    0 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    0%
    0%
    0%
    0%
    0 AWS reviews
    |
    118 external reviews
    External reviews are sourced from G2  and are not included in the star rating for this product.
    Ajay K.

    Feedback survey on CloudGuard Network Security

    Reviewed on Aug 22, 2024
    Review provided by G2
    What do you like best about the product?
    Most helpful and like part about check guard network security tool is its benifitin me and my security team for securing, preventing and protecting our clients Cloud environment from cyber threat and ZTN attacks.
    What do you dislike about the product?
    Nothing as such as we uses in depth will find it
    What problems is the product solving and how is that benefiting you?
    Acting as firewall for our cloud projects and ZTN. Amazingly benifits in Cloud infrastructure Security and protection.
    dharani a.

    Change tracking is available in network security module

    Reviewed on Aug 20, 2024
    Review provided by G2
    What do you like best about the product?
    We can able to track the changes of network security group rules and we can able to visualise the vpc route traffics detailly and can manage the configured IP address and it's CIDR.
    What do you dislike about the product?
    The change tracking of network security group rules is available only in AWS.
    What problems is the product solving and how is that benefiting you?
    We can easily find and manage the server IP address on single console
    RAJA S.

    Advanced threat modeling for Cloud networks

    Reviewed on Aug 20, 2024
    Review provided by G2
    What do you like best about the product?
    It has the capabilities to check and observe if any unusual behaviour happened on our network. It has the feature we can have the custom use case's to observe the traffics.
    What do you dislike about the product?
    It only supported on cloudtrail and vpc logs.
    What problems is the product solving and how is that benefiting you?
    We can easily monitor the unusual network traffic and user behaviour on cloud infras
    Computer & Network Security

    Cloud Security Engineer

    Reviewed on Aug 13, 2024
    Review provided by G2
    What do you like best about the product?
    As a Cloud security engineer I have been using and used many and multiple tool,s, softwares and platforms for the network security, network testing and network analysis, etc. Nowdays experiencing my hands on with check points Cloud security tools for my new cloud Security Analysis projects and this particular tool from Check Point has been proven a most adavanced and most secure platform for the our cloud projects. With features I loved and fan of as below-
    Easy of integration .
    Reatl time monitoring.
    And ensuring various compliances.
    What do you dislike about the product?
    Little bit of learning curve for first time users.
    What problems is the product solving and how is that benefiting you?
    I would highly recommend and suggested this tool for the industries and companies Working on projects such as Cloud Network Security Solutions.
    Computer & Network Security

    Protecting Securing and Enhancing our cloud network infrastructure security

    Reviewed on Aug 07, 2024
    Review provided by G2
    What do you like best about the product?
    Integration capabilities and it's comprehensive security features for our cloud networks like Securing network traffics. Optimaying and monitoring infrastructure networks and our any security posters.
    What do you dislike about the product?
    Cost and may be complexity of integration.
    What problems is the product solving and how is that benefiting you?
    Cloud data analysis for security compliance. Advanced technology for threat protection.
    View all reviews