Sold by: Check Point Software TechnologiesÂ
Deployed on AWS
AWS Free Tier
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation.
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Overview
Video
Video 1
Video
Product video
CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot.
CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices.
This CloudGuard Network Security gateway will be deployed as a single gateway, as a high availability cluster, or as an Auto Scaling group via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc.
This BYOL distributed security gateway is managed from a central Security Management Server, which provides consistent security policy management, enforcement, and reporting across AWS and hybrid deployments within a single pane of glass.
The Security Management Server is not included in this offering. To manage CloudGuard Network Security Gateway it is recommended using Check Point Smart-1 Cloud (https://www.checkpoint.com/quantum/unified-cyber-security-platform/smart-1-cloud/Â ).
Highlights
- Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Depending on your existing license, SandBlast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques).
- Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed to meet dynamic security requirements, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment (e.g. using AWS CloudFormation), while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
- Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.
Details
Categories
Delivery method
Delivery option
64-bit (x86) Amazon Machine Image (AMI)
Latest version
Operating system
OtherLinux Gaia 3.10
Deployed on AWS
Unlock automation with AI agent solutions
Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
Please see seller website for refund details.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA)Â .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Additional details
Usage instructions
Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:
- SSH password authentication is disabled in /etc/ssh/sshd_config
- For information regarding Firefox and Chrome refer to sk121373.
Resources
Support
Vendor support
This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/ To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/Â
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
e92plus Technical Services provide dedicated Check Point CloudGuard consultancy services delivered by our team of experienced vendor-accredited engineers.
Check Point CloudGuard Network Security is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
A single pane-of-glass security management console delivers consistent visibility, policy management, logging, reporting and control across all cloud environments and networks
Customer reviews
0 ratings
0 AWS reviews
|
136 external reviews
Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
Manish T.
Flexible Cloud Security with Scalable Licensing Options
Reviewed on Nov 07, 2025
Review provided by G2
What do you like best about the product?
Checkpoint Cloudguard Network Security supports both public as well as private cloud. It has different type of licensing BYOL which depends upon number of cores as well as pay as you go model and it will increase the capacity as the size grow.
What do you dislike about the product?
It is fully dependent upon cloud like AWS and Azure for whose we donot have any access to their infra. We will be vulnerable for the issue they face in their services like last time.
What problems is the product solving and how is that benefiting you?
It solves our need to increase the firewall capacity during our peak season due to its pay as you go licensing model. It also auto retrieves all the object from its Cloud manager once any object is created in the cloud.
Raxit M.
Robust Security and Seamless CI/CD Automation with Cloudguard
Reviewed on Nov 03, 2025
Review provided by G2
What do you like best about the product?
What I like about Checkpoint Cloudguard is that it provides the features of firewall like efficacy against malware, ransomware and zero day attacks. It also provides seamless CI/CD automation with cloud native tool.
What do you dislike about the product?
Its pricing is little bit costlier and it is only as Saas based solution where the edge location is not present in most of the country which can result in increased latency.
What problems is the product solving and how is that benefiting you?
It has helped to secure our application in without need of more capital for on prem WAF solution.
Diego A.
CloudGuard: My First Line of Defense
Reviewed on Oct 08, 2025
Review provided by G2
What do you like best about the product?
The way CloudGuard handles cloud traffic feels effortless. I don’t have to constantly tweak settings or chase down alerts it just works in the background, keeping everything secure.
The integration with different cloud platforms is smooth, and I get the visibility I need without digging through endless dashboards.
The integration with different cloud platforms is smooth, and I get the visibility I need without digging through endless dashboards.
What do you dislike about the product?
One thing that could be improved is the initial setup it’s not exactly plug and play.
If you’re not familiar with cloud architectures or Check Point’s ecosystem, getting everything configured can take some time.
Once it’s running, it’s solid, but that onboarding curve might be steep for smaller teams or those new to cloud security.
If you’re not familiar with cloud architectures or Check Point’s ecosystem, getting everything configured can take some time.
Once it’s running, it’s solid, but that onboarding curve might be steep for smaller teams or those new to cloud security.
What problems is the product solving and how is that benefiting you?
CloudGuard helps me stay ahead of cloud threats without having to be a cloud security expert.
Before, I was constantly worried about misconfigurations or missing something critical.
Now, it handles the heavy lifting monitoring traffic, spotting risks, and keeping things locked down.
It’s like having a quiet guardian that watches over my cloud setup while I focus on everything else.
Before, I was constantly worried about misconfigurations or missing something critical.
Now, it handles the heavy lifting monitoring traffic, spotting risks, and keeping things locked down.
It’s like having a quiet guardian that watches over my cloud setup while I focus on everything else.
Joao P.
Reliable network protection across cloud environments
Reviewed on Oct 06, 2025
Review provided by G2
What do you like best about the product?
What I like best about CloudGuard Network Security is that it gives really strong protection for my cloud traffic. It’s reliable, integrates well with AWS and Azure, and I like how easy it is to manage security policies in one place. The threat prevention feels solid and up to date.
What do you dislike about the product?
Sometimes the setup and configuration can be a bit tricky, especially for more complex environments. The interface could be a little more intuitive, and updates or policy changes can take some time to apply. It’s also not the cheapest option out there.
What problems is the product solving and how is that benefiting you?
CloudGuard Network Security helps us protect cloud workloads and traffic from external threats and misconfigurations. It makes it easier to manage security across multiple cloud platforms and keeps our policies consistent. The biggest benefit is better visibility and control, which gives us more confidence that our environment is secure.
Zin Min L.
Check Point CloudGuard Network Security Product is a reliable cloud-based security solution
Reviewed on Sep 27, 2025
Review provided by G2
What do you like best about the product?
This product provides a reliable and secure network for your businesses. It gives a massive amount of upside features for a cloud-based environment such as data loss prevention, IPS, application control, IPSec VPN, URL filtering, antivirus, threat emulation and threat extraction. Customer support provided by Check Point vendor is one of the best options to choose this product.
What do you dislike about the product?
First time implementation for an unexperienced engineer with this product is not good easy. Learning resources are not easy to understand for a junior. Its cost is a drawback feature for a developing country although its product's capabilities is absolutely good.
What problems is the product solving and how is that benefiting you?
For AWS Cloud, It protects cloud assets with a full suite of advanced security capabilities, including firewall, data protection, IPS, IPSec VPN for network traffic security, URL filtering, antivirus, threat emulation and threat extraction.