Listing Thumbnail

    CloudGuard WAF

     Info
    Deployed on AWS
    Are you looking for an automated Web Application Firewall (WAF) with precise prevention and no management overheads? CloudGuard WAF delivers AI-enabled Web Application and API protection.

    Overview

    Play video

    With deep application contextual analysis, CloudGuard WAF eliminates the tradeoff between the level of application security and the complexity of managing it. Your applications drive your business. As they evolve, grow, and expose more APIs, your attack surface expands. CloudGuard WAF learns how an application is typically used by profiling the user and the app content. It then scores each request accordingly, eliminating false positives while maintaining the highest security standards. CloudGuard WAF is easy to deploy and requires no ongoing maintenance as it continues to protect your evolving applications and APIs.

    Advantages

    • 90% of CloudGuard WAF customers run in prevent mode, demonstrating the hands-off nature of the management required
    • 100% of CloudGuard WAF customers have less than 10 exception rules!
    • CloudGuard WAF goes from deployment to active protection in just days, not weeks.

    Click on the "View Usage Instructions" and "Usage Information" below to get next steps for setting up CloudGuard WAF.

    This is a BYOL Image. Pricing and entitlements for this product are directly with Check Point. As an AWS partner Check Point enables marketplace transaction on this listing through a private offer provided by Check Point. Please contact your Check Point trusted advisers (link to a list of CP sellers / or directly to check point SDRs). Payment for the underlaying infrastructures are paid directly to AWS and is based on AWS pricing.

    Highlights

    • Precise Prevention: Contextual app analysis for high fidelity application security to prevent known and unknown cyberattacks.
    • Automated by Design: Auto-deploy, hands-off management and AI-powered short learning cycles.
    • Flexible deployment: Protect all applications in any cloud environment built on any architecture.

    Details

    Delivery method

    Delivery option
    Auto Scaling Group
    Single Gateway into existing VPC
    Single Gateway into new VPC

    Latest version

    Operating system
    OtherLinux Gaia 3.10

    Deployed on AWS

    Unlock automation with AI agent solutions

    Fast-track AI initiatives with agents, tools, and solutions from AWS Partners.
    AI Agents

    Features and programs

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    CloudGuard WAF

     Info
    Pricing and entitlements for this product are managed through an external billing relationship between you and the vendor. You activate the product by supplying a license purchased outside of AWS Marketplace, while AWS provides the infrastructure required to launch the product. AWS Subscriptions have no end date and may be canceled any time. However, the cancellation won't affect the status of the external license.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Vendor refund policy

    Please see seller website for refund details.

    Custom pricing options

    Request a private offer to receive a custom quote.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    Auto Scaling Group

    A number of AppSec instances in an Auto Scaling Group. Load balanced by an ELB.

    CloudFormation Template (CFT)

    AWS CloudFormation templates are JSON or YAML-formatted text files that simplify provisioning and management on AWS. The templates describe the service or application architecture you want to deploy, and AWS CloudFormation uses those templates to provision and configure the required services (such as Amazon EC2 instances or Amazon RDS DB instances). The deployed application and associated resources are called a "stack."

    Additional details

    Usage instructions

    Navigate to https://portal.checkpoint.com ; if you do not have an existing account, open a new account. Open the main menu (icon is in the top left corner), choose APPLICATION SECURITY under the CloudGuard column, then select Cloud on the left. The Getting Started page will open. After defining the asset, you will be redirected to the Profile page. Note: Obtain the Token for CloudGuard WAF from the Profile page.

    Support

    Vendor support

    To open a support ticket, send an email to infinity-next-support@checkpoint.com  CloudGuard WAF

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Similar products

    Customer reviews

    Ratings and reviews

     Info
    4.3
    2 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    0%
    100%
    0%
    0%
    0%
    2 AWS reviews
    |
    48 external reviews
    Star ratings include only reviews from verified AWS customers. External reviews can also include a star rating, but star ratings from external reviews are not averaged in with the AWS customer star ratings.
    Hailemichael Yigrem

    Helps protect against multiple attack types with seamless integration and strong threat prevention

    Reviewed on Jun 22, 2025
    Review provided by PeerSpot

    What is our primary use case?

    Our main use case for Check Point CloudGuard WAF  is that we have been reselling this product for three years, and we have experienced that this CloudGuard WAF  protects from zero-day attacks, boot attacks, and other OWASP top 10 attacks.

    Before deploying Check Point CloudGuard WAF , we faced several vulnerabilities such as SQL injections. We encountered different vulnerabilities, but after implementing this product, we have reduced these attacks.

    We are a reseller of Check Point.

    What is most valuable?

    The best features that Check Point CloudGuard WAF  offers are its easy integration with other products and its good threat prevention features. Since it is default in a device, it protects us from zero-day attacks, and first learns traffic before allowing it into our network. It protects us from botnet attacks and many vulnerabilities are discarded by these deployments.

    The integration process went smoothly for us as it easily integrated with our existing products, and it reduced approximately 90% of attacks after deployment.

    Check Point CloudGuard WAF also has a comprehensive reporting feature and a well-designed dashboard.

    Check Point CloudGuard WAF has impacted our organization positively, as after deploying this product it reduces the time to analyze attacks and protects from several attacks, enhancing our security posture.

    We are now saving approximately four hours per day on analyzing attacks.

    What needs improvement?

    There are improvements that can be made regarding pricing since it has a high initial cost. If they could reduce that, it would be beneficial. Additionally, it has a complex initial configuration. Reducing such complexities would make it even better to have.

    For how long have I used the solution?

    We have been using Check Point CloudGuard WAF for three years now. It is a good product.

    What do I think about the stability of the solution?

    Check Point CloudGuard WAF is stable.

    What do I think about the scalability of the solution?

    It handles increasing traffic easily because we can extend our demands based on our needs.

    How are customer service and support?

    The customer support service is good based on the support we purchased, as they are available 24/7.

    How would you rate customer service and support?

    Positive

    How was the initial setup?

    The initial setup with Check Point CloudGuard WAF is complex.

    What was our ROI?

    I have seen a return on investment since deploying Check Point CloudGuard WAF. We have saved money by protecting our environment from new vulnerabilities and preventing theft by cybercriminals. It has saved our money and time investigating vulnerabilities and zero-day attacks. It has great potential and provides an excellent security profile to our environment.

    What's my experience with pricing, setup cost, and licensing?

    The initial cost of Check Point CloudGuard WAF is high.

    Which other solutions did I evaluate?

    We have evaluated other WAF providers such as F5 and others, but we chose Check Point CloudGuard WAF according to its performance. It is a good device.

    What other advice do I have?

    I suggest to others that if you have web-based applications or HTTPS traffic, you must use Check Point CloudGuard WAF to protect your service. On a scale of 1-10, I rate this solution a 9.

    Which deployment model are you using for this solution?

    Private Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Other
    Sumeet M.

    Check Point CloudGuard WAF

    Reviewed on Jun 18, 2025
    Review provided by G2
    What do you like best about the product?
    What I like best about Check Point CloudGuard WAF is that it gives solid protection for our web applications without being hard to use. It automatically detects and blocks threats like SQL injection, cross-site scripting, and other attacks, so we don’t have to worry about constant monitoring. It also keeps everything running smoothly without slowing things down. The setup is straightforward, and the dashboard makes it easy to see what’s happening.
    What do you dislike about the product?
    Some advanced settings can be a bit complex at first, but it works well once set up.
    What problems is the product solving and how is that benefiting you?
    Check Point CloudGuard WAF helps protect our web applications from common threats like SQL injection, cross-site scripting, and bot attacks. It blocks harmful traffic before it reaches our systems, which keeps our apps safe and running smoothly. This saves us time, reduces the risk of downtime, and gives us peace of mind knowing our web services are protected without needing constant manual monitoring.
    Kowshik R.

    Presales Engineer

    Reviewed on Jun 12, 2025
    Review provided by G2
    What do you like best about the product?
    Check Point CloudGuard WAF is great because it uses smart AI to stop new and advanced threats automatically. It’s fully managed, so you don’t have to worry about updates or tuning—Check Point handles everything. It works perfectly with cloud platforms like AWS and Azure, scaling up as your traffic grows. It protects against all kinds of attacks, including bots, DDoS, and hacked APIs, all in one place. Plus, it’s easy to control with a single dashboard, making security simple and hassle-free
    What do you dislike about the product?
    Check Point CloudGuard WAF can be pricey, especially for smaller teams. Setting it up isn't always quick—it might take some time to get everything working smoothly. While it's good at blocking threats, tweaking advanced rules isn't as flexible as some other tools. Since Check Point manages updates, you can't always make changes on your own schedule. Occasionally, it might slow down your apps a tiny bit when inspecting traffic deeply. Still powerful, but worth considering these trade-offs
    What problems is the product solving and how is that benefiting you?
    Check Point CloudGuard WAF solves three big headaches for me. First, it acts like a smart shield that automatically blocks hackers trying to break into my websites or APIs - stopping stuff like SQL injections, credential stuffing, and sneaky bot attacks. Second, it saves me tons of time because Check Point handles all the security updates and rule changes behind the scenes. Third, it keeps my cloud apps safe without slowing them down, growing automatically as my traffic increases. The best part? I get strong protection without needing to be a security expert, and I can see everything that's happening through one simple dashboard. It's like having a 24/7 security guard that never sleeps and learns new tricks to catch threats.
    Computer & Network Security

    Effective and User-Friendly Web Application Firewall

    Reviewed on May 23, 2025
    Review provided by G2
    What do you like best about the product?
    What I like best about Check Point CloudGuard WAF is its strong integration with cloud-native environments. It works seamlessly with our AWS deployment, and the automated protections help us stay ahead of evolving threats without constant manual tuning. The UI is intuitive, which makes managing policies and viewing logs much easier, even for team members who aren't deep into security. I also appreciate how responsive the threat intelligence updates are—there's a clear sense that we're being protected with real-time data. Overall, it gives us peace of mind knowing our web applications are secure without creating unnecessary complexity.
    What do you dislike about the product?
    While Check Point CloudGuard WAF is a solid solution overall, there are a few areas that could be improved. Occasionally, the initial configuration can be a bit time-consuming, especially for more complex environments. Also, while the documentation is helpful, some sections could benefit from a bit more clarity or real-world examples. That said, once everything is set up, the platform runs smoothly and delivers reliable protection.
    What problems is the product solving and how is that benefiting you?
    Check Point CloudGuard WAF helps us protect our web applications from common threats like SQL injection, cross-site scripting, and bot attacks. It’s particularly valuable in our cloud environment, where scalability and automation are key. By automatically adapting to new threats and integrating smoothly with our DevOps workflows, it reduces the need for manual intervention and speeds up our response time. This not only strengthens our security posture but also frees up our team to focus on other priorities without worrying about constant monitoring or complex rule updates.
    ivan l.

    WAF for Daily Life

    Reviewed on May 20, 2025
    Review provided by G2
    What do you like best about the product?
    facilitates administration and is very intuitive
    What do you dislike about the product?
    how easy it is to handle it, plus the interface is very easy to learn quickly
    What problems is the product solving and how is that benefiting you?
    Application protection
    View all reviews