CloudGuard IaaS NGFW with Threat Prevention - Previous Version
Check Point Software Technologies | R77.30-041.168Linux/Unix, Other R77.30 - 64-bit Amazon Machine Image (AMI)
External reviews
External reviews are not included in the AWS star rating for the product.
Robust features in a cloud native world
What do you like best about the product?
Using CloudGuard network security allows for a familiar implementation with all the features of an onprem appliance. The deployment can be completely codified using Terrafrom, allowing for reapeatable deployments for each region. Using the AWS GWLB and endpoint service, inspecition can be extended to any / all member accounts for ingress / egress inspection. The GWLB deployment also allows for right sizing of EC2s that can increase/decrease with autoscaling. The policy can also be codified using Terraform, allowing for teams to inner-source access requests, but ensuring the proper security teams can still approve the access before it is rolled out.
What do you dislike about the product?
When using Terraform to manage the security policy, the object creation layout needs to be well thought through to ensure objects are created as disired. Also, publishing changes needs to be accounted for on Terraform apply success and failures so Terraform state and the Check Point database stay in sync.
What problems is the product solving and how is that benefiting you?
CloudGuard Network Security provides inspection throughout many parts of the cloud network.
1. Inspection of traffic from the internet inbound to a VPC.
2. Inspection of traffic from a VPC to the internet. Internet categories and applications can be used instead of having to know each exact FQDN, which would be a major pain and struggle for engineering teams.
3. Inspection between VPCs
4. Inspeciton between VPCs and on-prem
5. IPS
6. Detailed traffic logging
7. Identity based access
Since this deployment is EC2 based, traffic mirroing is also possible to enable external IDS systems.
1. Inspection of traffic from the internet inbound to a VPC.
2. Inspection of traffic from a VPC to the internet. Internet categories and applications can be used instead of having to know each exact FQDN, which would be a major pain and struggle for engineering teams.
3. Inspection between VPCs
4. Inspeciton between VPCs and on-prem
5. IPS
6. Detailed traffic logging
7. Identity based access
Since this deployment is EC2 based, traffic mirroing is also possible to enable external IDS systems.
- Leave a Comment |
- Mark review as helpful
Cloud Guard Network Security - Best Network Threat Analyser for Cloud
What do you like best about the product?
It will help us to reduce malicious attack traffic s on our cloud applications. It will monitor all our network and user level traffics and events.
I like the option of GSL module to provide us on filter the traffic events more deeply.
I like the option of GSL module to provide us on filter the traffic events more deeply.
What do you dislike about the product?
Currently it will supports network and user activity to integrate.
What problems is the product solving and how is that benefiting you?
We reducing the risk of malicious traffics and it will help us to monitor our application traffics on 24/7
Shielding Networks in the on cloud applications
What do you like best about the product?
Its comprehensive threat protection capabilities, which seamless integrate with cloud environment traffic logs, while offering robust threat analysis, network traffic visibility, and user account activities on all our applications.
What do you dislike about the product?
The cost of licensing and maintenance could be a drawback for organizations with budget constraints, especially for smaller businesses or startups.It has the limitations the network security is only supported on vpc traffic and cloud trail logs only.
What problems is the product solving and how is that benefiting you?
It will helps us to monitor and analyse cloud network logs continuously and will reduce the risk of traffics from the attackers and malicious requests.
Cloudguard - your cloud security companion
What do you like best about the product?
CloudGuard's versatility and robust threat prevention stand out in securing diverse cloud environments.
What do you dislike about the product?
Limited visibility and complex setup are drawbacks in CloudGuard.
What problems is the product solving and how is that benefiting you?
CloudGuard tackles security concerns in cloud transitions, ensuring data control, threat prevention, and compliance. Its simplicity aids my company, securing our digital space without the complexity.
Manages traffic at the network level
What do you like best about the product?
It enhances the capabilities of GWLB by offering cutting edge threat prevention and security features. The satisfaction it brings is unparalleled.
What do you dislike about the product?
I find it lacking in terms of documentation and technical support. Facing issues or needing assistance the provided resources.
What problems is the product solving and how is that benefiting you?
CloudGuard Network Security solves the problem of balancing traffic flow in our business. This leads to an reliable network infrastructure.
Awesome security with an awesome cloud guard experience.
What do you like best about the product?
With the help of an integration with GWLB, CloudGuard Network Security offers powerful threat-prevention capabilities. It incorporates firewalling, an IPS, and application control technologies to quickly identify and stop known and unidentified threats. This helps protect your cloud workloads by ensuring that harmful traffic is kept out of your VPC. It was totally user friendly, this is an important aspect of cloud guard.
What do you dislike about the product?
I have nothing against anything. Totally content.
What problems is the product solving and how is that benefiting you?
By combining the features of CloudGuard Network Security with Gateway Load Balancer, it improves the security of their AWS systems. It provides me with secure access management, comprehensive network visibility, and excellent threat prevention.
CloudGuard Network Security with the advantages of Gateway Load Balancer
What do you like best about the product?
CloudGuard Network Security integrates with GWLB to provide robust threat-prevention capabilities. It includes firewalling, an intrusion prevention system (IPS), and application control features to detect and block known and unknown threats in real-time. This ensures that malicious traffic is prevented from reaching your VPC and helps safeguard your cloud workloads
What do you dislike about the product?
everything was cool and fine, like With the integration of CloudGuard Network Security for Gateway Load Balancer, GWLB's capabilities are improved by introducing cutting-edge threat prevention and security features
What problems is the product solving and how is that benefiting you?
It increase the security of their AWS environments by integrating Gateway Load Balancer's capabilities with CloudGuard Network Security's. It offersme safe access management, scalable and effective threat prevention, and thorough network visibility and control.
Amazing experience with cloudguard with amazing security
What do you like best about the product?
User friendly interface, Strong security to secure the network.
What do you dislike about the product?
There are no any dislikes from my side. Totally satisfied
What problems is the product solving and how is that benefiting you?
It bring best security to the enterprise network with good inbuilt features
CloudGuard Network Security Review
What do you like best about the product?
I like this product from checkpoint to use the same kind of protection that we use on the firewall, such as IPS protection and antivirus protection. The product is very user-friendly. This product is easy to implement and easy to use. Another great feature is deep traffic analysis and a comprehensive reporting solution for presenting to the board.
What do you dislike about the product?
I don't have any issue with this product.
What problems is the product solving and how is that benefiting you?
CloudGuard provides the best security for networks. The brand is well known in the security industry, so we can easily trust on that. This product has excellent policy management and central control.
CloudGuard is a great option for cloud hosted firewall
What do you like best about the product?
Very good intrusion and threat detection. Integrates well with the cloud we use (Azure) and works well at local branches. Flexible enough to deploy from large centralized data centers to IoT/OT devices to local branches. Logging is exceptional and one of the best experiences I have noticed in this space.
What do you dislike about the product?
Expensive -- depending on requirements. Experience is disjointed at times and you can tell everything hasn't been fully integrated in smart console. Policy creation and editing is tedious and difficult to see.
What problems is the product solving and how is that benefiting you?
CheckPoint CloudGuard is an excellent choice for organizations that need a cloud-based firewall solution. I had a great experience from contract negotiation to implementation. Support was excellent, consulting is top-notch, and the product speaks for itself. We used this solution exclusively with Azure.
showing 11 - 20