Sign in
Categories
Your Saved List Become a Channel Partner Sell in AWS Marketplace Amazon Web Services Home Help

CloudGuard Network Security All-In-One

Check Point Software Technologies | R81.20-634.1849

Linux/Unix, Other Gaia 3.10 - 64-bit Amazon Machine Image (AMI)

Reviews from AWS customer

20 AWS reviews

External reviews

194 reviews
from and

External reviews are not included in the AWS star rating for the product.


4-star reviews ( Show all reviews )

    Rui-Pereira

Integration into the cloud ecosystem enhances network security

  • February 04, 2025
  • Review provided by PeerSpot

What is our primary use case?

I am tasked with deploying firewalls in Azure Cloud, AWS, and VMware. This involves setting up virtual machines in VMware and is essentially focused on these tasks.

What is most valuable?

It does a great job protecting the clouds.

The important point is that the solution is integrated into our management system (if they already have Check Point). It's just one more gateway to add. We have it on Azure and others. The advantage lies in the integration within our existing ecosystem, which is amazing.

It's good at identifying threats and on par with the market - at least, in comparison to the others we work with. 

We have confidence in secure cloud deployments and integrations. It's important to have confidence. Even if nothing happens, you are protected, You never know when bad luck will happen. There are some public cases that were missing network security on the cloud, and they were affected. It's a must-have, like an insurance policy. 

What needs improvement?

The license model could be simpler. We have some issues with the license since it tries to be simple, and yet in some cases, it tends to be complex. Apart from that, I do not recall any other issues.

For how long have I used the solution?

I have been using the solution for roughly four years.

What do I think about the stability of the solution?

The stability is generally good. Sometimes there are issues we do not understand, especially with older features. Outside of that, the stability is good. It could be better. For instance, when we are working on a release and do an upgrade, we start experiencing unexpected issues. New features might have problems, however, for existing ones, we expect the same level of functionality as before.

What do I think about the scalability of the solution?

We do not use scalability. I do not have much experience with auto scaling, however, it could be beneficial. Usually, our customers use a model that involves bringing their own licenses with static gateways, not scaling out.

How are customer service and support?

Check Point support has its ups and downs. Sometimes, the support is good, and other times, we are a bit desperate. Overall, I would say the customer service is good, not marvellous. There are some challenges.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

As integrators, we also work with other solutions. The main difference is we can take advantage of integrative management. If you already have an environment with Check Point, it's easy and an advantage. 

How was the initial setup?

We typically deploy to the cloud. We create an implementation strategy with our clients. 

What about the implementation team?

Usually, the customer is very savvy and knows what they want. We provide some advice, however, usually, they have their own ideas on what to do and when to do it.

What was our ROI?

It is important to have this solution because even if nothing happens, you are not protected without it. You never know when bad luck might knock at your door. 

What other advice do I have?

I rate it eight out of ten. 

You need to have some kind of protection in the cloud. Maybe the native protection is enough, maybe it is not. Having protection gives more confidence in the solution. 

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other


    Stefan Baumgartner

Unified management and policies enable secure workload transitions to the cloud

  • February 04, 2025
  • Review from a verified AWS customer

What is our primary use case?

I use Check Point CloudGuard Network Security to ensure we have the same management system for managing firewall policies both on-premises and in the cloud.

How has it helped my organization?

Check Point CloudGuard Network Security enabled us to move to cloud workloads safely while having the same level of security as we have on-prem. 

What is most valuable?

The unified management, unified log management, and unified policies are all invaluable. We like that everything is unified. 

CloudGuard Network Security provides us with unified security management across hybrid clouds as well as on-premise. Security operations are simplified by unified management, easing troubleshooting, and maintenance. Using the same objects in both the on-prem and cloud policies reduces the need to switch between different interfaces and log stores, enhancing our security operations significantly.

It's helped us reduce organizational risk. I cannot say by how much. Just having the same policies everywhere without having to move around different management interfaces and log stores just helps with security operations. We can see everything in one pane of glass. 

We have confidence in our secure deployments and migrations. In fact, it has enabled us to move to the cloud securely. The confidence is there based on our confidence in Check Point products on-prem. 

What needs improvement?

Improvement is needed in the deployment models. Currently, I have deployed VMs and installed CloudGuard as if they were gateways. Having some as-a-service models would be great. 

Scalability could be improved as well; needing to purchase a new license each time I want to add a new interface is not ideal.

For how long have I used the solution?

I have used the solution for three years now.

What do I think about the stability of the solution?

The solution works adequately, meeting my expectations for a firewall.

What do I think about the scalability of the solution?

Scalability could be improved. When we need to buy a new license, to add a new interface is not ideal.

How are customer service and support?

Support is okay. Sometimes, it is necessary to reiterate the importance of a case; however, generally, the cases are handled to our satisfaction.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We did not use a different solution previously. 

How was the initial setup?

We have an on-prem and cloud environment. The setup was relatively easy, even the first time. I just select it from the marketplace, and it appears. After that, it's the same as installing on-premise gateways, including a first-time installation wizard.

What about the implementation team?

I received assistance from an external third-party company. The experience was great and has continued to be good over the seven years I've employed them.

What's my experience with pricing, setup cost, and licensing?

The cost is adequate. I am not responsible for pricing and licensing aspects, I would say pricing is adequate. It is not cheap, however, I am not seeking cheap solutions; I want the best solutions.

Which other solutions did I evaluate?

We have not evaluated other solutions. 

What other advice do I have?

I would give it a solid eight out of ten. I am not yet fully utilizing all its functionalities and I cannot assess all features. There is always room for improvement. 

Which deployment model are you using for this solution?

Hybrid Cloud


    Christian Riedl

Centralized management reduces workload and ensures continuous policy across infrastructure

  • February 04, 2025
  • Review provided by PeerSpot

What is our primary use case?

CloudGuard is protecting my cloud workloads. The secure communication between my on-premises network and the cloud network is the main use case. I am establishing one continuous rule set across all of my infrastructure and then maintaining all the guards and measures throughout my infrastructure.

How has it helped my organization?

We managed to reduce the effort and workload as well as the attack surface across our infrastructure. We now have a more continuous policy. 

What is most valuable?

The centralized management is one of the key use cases. 

I managed to reduce the effort, workload, and attack surface across my overall financial infrastructure. These are the main things. Centralized management is the feature I like best, resulting in reduced workload and more continuous policy.

We have unified security management across hybrid environments. 

It's good for identifying security threats. We compare it to what cloud solutions providers offer. We look more into the actual traffic and the enforcement of the policy. What Check Point provides goes beyond and is not comparable to what is offered by the native network solutions. 

We have confidence in secure cloud migrations. It's imperative to use a solution like this. We wouldn't want to run our cloud without this level of security and protection.

What needs improvement?

Today, we are trying to look more into encrypted traffic. API security is one of the most highlighted aspects we are currently evaluating. Network Detection Response (NDR) and AI protection are the main areas I am focusing on now. In addition, I am looking into Secure Access Service Edge (SASE) solutions in general.

For how long have I used the solution?

I have been using a Check Point solution for three and a half years now. I have used network security for a much longer period before that. 

What do I think about the stability of the solution?

The stability is very good. I am very happy with stability.

What do I think about the scalability of the solution?

CloudGuard scalability is what it is. It integrates perfectly into the cloud world, which is what I expect. With the centralized management in place, scalability is perfect. I can deploy it everywhere I need it. Scalability is one of the key factors for selecting this solution.

How are customer service and support?

Check Point support is similar to other support on the market.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

I have looked at Cisco and Palo Alto. I evaluated these solutions and then came to terms with Check Point. We like that it integrates with other security solutions from Check Point we're running.

Which other solutions did I evaluate?

We have looked at competitive vendors a lot and we decided to go with Check Point. We've looked at Cisco and Palo Alto, however, we preferred Check Point's centralized management. 

What other advice do I have?

Overall, I would rate the product eight out of ten.


    Meir Carmel

Makes things easier and helps on a daily basis because it optimizes the understanding of what we have

  • February 04, 2025
  • Review provided by PeerSpot

What is our primary use case?

My primary use case is for the protection of environments that are in the cloud and multiple branches and areas that are in the layout of all the systems.

How has it helped my organization?

This solution helped us migrate to cloud environments from environments that were on premises. It helped us implement protection for our systems. The fact that it is part of Check Point's overall protection system within some kind of central management system allows us to easily manage and gain visibility on everything that happens in the organization.

What is most valuable?

The protection is at a very good level. There's a very high catch rate. It has good flexibility in operating and implementing the system.

Protection is valuable to me because security is the most important aspect. At the end of the day we are looking for what will give us the answer at the best level.

It is easy to implement, and it has a lot of flexibility compared to other systems you have in the organization. In the end, this is a parameter that, in my eyes, is very central.

In the end, it saves time. It's all in one place and you can quickly see how you're doing with the cloud environment. It just makes things easier and helps on a daily basis because it optimizes the understanding of what we have. 

Instead of logging into the system by yourself and starting to check, there's another management system that sees logs. It examines the data daily, and it creates flexibility regarding what we want to investigate. It is much easier for everything to be in the same management and not scattered in all sorts of different places.

Check Point helped me a lot to know that I have a solution that is stable and answers my needs. It really gave me the confidence to move forward with the whole migration to the cloud. It was very helpful.

When I moved to the cloud, I looked at Check Point's solution and as soon as it suited me, I bought it. We chose CheckPoint right away, it was our go-to choice.



What needs improvement?

From my point of view and my needs, I don't see room for improvement. In my opinion, the more it has support for more environments and the more integration there is with wider areas, not only in Check Point's systems, but also with other systems, then I think it will allow access to more customers which is not specifically my case, but in principle the wider the system, the more it will be able to appeal to a larger audience; integration with other manufacturers in other words.

For how long have I used the solution?

I have been using CloudGuard Network Security for two years.

What do I think about the stability of the solution?

The platform is very good in terms of stability. We never encountered any issue with it.

What do I think about the scalability of the solution?

Scalability is very good.

How are customer service and support?

Support is very good. The response time is good and fast, and they are also very professional.

How would you rate customer service and support?

Positive

How was the initial setup?

I had help from a Check Point CS and it all went smoothly. There was only one person from Check Point who was in constant communication with us and provided us service in installing the solution, my experience with him was very good.

What was our ROI?

After running a test against what alternatives exist in the market and seeing what they offer, this is the solution that fits perfectly into our budget. This is a very important parameter for us, and Check Point CloudGuard Network Security did so.

What's my experience with pricing, setup cost, and licensing?

The price was really good, that's the main reason we chose it. In addition, the licensing model was very simple.


What other advice do I have?

I appreciate the cloud network security. I find it to be very effective, and I am pleased with securing cloud deployments.

I would rate CloudGuard Network Security an eight out of ten. There's always room for improvement. It could become a 10 if they had more accessibility to other platforms. Overall, it is a good product.

Which deployment model are you using for this solution?

On-premises


    Amaratunga Arachchige VimukthiAmaratunga

Comprehensive security and proactive alerts enhance data management

  • November 27, 2024
  • Review provided by PeerSpot

What is our primary use case?

We are dealing with customer data, so we use a firewall to cover all API calls. If you access our sites, it will be via Check Point Firewall. Or if you send a file, it will go via Check Point Firewall.

What is most valuable?

Check Point CloudGuard provides comprehensive security coverage. The solution covers all entry points and helps manage customer data securely by covering all API calls and processing data efficiently. 

It offers alerts for suspicious activities and an automated system that updates itself to detect irregular patterns, providing notifications for possibly compromised situations.

What needs improvement?

The pricing is too high. We pay more than twenty-five thousand USD per year, which could be reduced. 

Moreover, Check Point does not initially support serverless architecture, requiring additional efforts from our team to manage it.

For how long have I used the solution?

Our company has been using Check Point tools for five years.

What do I think about the stability of the solution?

There are no issues with the stability of Check Point CloudGuard.

What do I think about the scalability of the solution?

The solution is scalable to support our growth for at least two to three more years.

How are customer service and support?

Customer support is efficient with no major issues. The support team is responsive and cooperative. However, the knowledge and expertise of the professional services staff were inconsistent.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

We experienced a lower pricing offer from Trend Micro, however, due to security preferences and support, we chose Check Point.

How was the initial setup?

The initial setup faced challenges due to knowledge gaps on the professional services team. However, the technical side was supportive and helped address these issues.

What about the implementation team?

The professional services used for implementation had inconsistent expertise, requiring involvement from our technical team to resolve gaps.

What's my experience with pricing, setup cost, and licensing?

Pricing is high, over $25,000 USD annually. The package offered includes features we may not need, and more flexible licensing could be cheaper.

Which other solutions did I evaluate?

We considered alternatives like Trend Micro, which offered more competitive pricing.

What other advice do I have?

I would recommend Check Point CloudGuard. The solution is rated eight out of ten overall.

Which deployment model are you using for this solution?

Hybrid Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other


    Krishna KantUpadhyay

Effortless threat prevention with seamless cloud integration and responsive support

  • November 11, 2024
  • Review provided by PeerSpot

What is our primary use case?

Our primary use case for CloudGuard Network Security is to secure the cloud environment where we host our backend systems. The platform helps to guard the network security of our infrastructure by securing the traffic and preventing cyber threats. 

It also ensures compliance with industry regulations. Moreover, it integrates easily with AWS and Google Cloud, allowing us to apply a unified security policy throughout our cloud infrastructure.

How has it helped my organization?

Check Point CloudGuard has been very helpful in maintaining a high level of security across our cloud environments as our apps integrate with multiple cloud services. 

It ensures secure communication between services and user devices, protecting sensitive data like user information and financial transactions. This has resulted in increased client satisfaction and retention, particularly in sectors requiring stringent data protection like finance and healthcare.

What is most valuable?

One of the most valuable features is the automated threat prevention, which helps us detect and block potential cyberattacks in real-time, minimizing data breaches. 

The ability to integrate with multiple cloud platforms provides a centralized view of our applications, enhancing security management. The solution also offers real-time visibility and protection against network threats.

What needs improvement?

The user interface could be more intuitive, and the initial setup and configuration can be complex, requiring a technical team. 

Additional improved documentation and support would make it easier for beginners and small-scale startups. Furthermore, the pricing model is quite expensive, which could be a barrier for smaller companies.

For how long have I used the solution?

I have been using the solution for approximately one year.

What do I think about the stability of the solution?

The platform is quite stable. We have not faced any difficulties with its stability.

What do I think about the scalability of the solution?

The solution is very scalable. I would rate its scalability as nine out of ten.

How are customer service and support?

My experience with customer support has been positive. They are responsive and knowledgeable, available twenty-four by seven. However, they could improve by providing documentation for offline issues to better assist users who may not reach out to them directly.

How would you rate customer service and support?

Neutral

Which solution did I use previously and why did I switch?

Before using Check Point CloudGuard, we managed security through a team of experts. Due to budget cuts during a recession, we switched to using this solution to maintain our security standards.

How was the initial setup?

The initial setup was quite complex, requiring a technical team to understand the processes and implement the solution. More intuitive configuration tools and better documentation would be helpful.

What about the implementation team?

We deployed the solution with a team of fifty-seven people, including cybersecurity engineers and cloud experts, along with support from customer service.

What was our ROI?

Implementing CloudGuard has resulted in an excellent return on investment over one hundred percent ROI. It has saved costs in our security team, saved potential security breach costs, and enhanced client satisfaction.

What's my experience with pricing, setup cost, and licensing?

The pricing and licensing are expensive, costing between seven thousand to eight thousand dollars. While it offers good features like threat prediction management, reducing the cost will make it more accessible to a broader audience.

Which other solutions did I evaluate?

We have not used other network security solutions before Check Point CloudGuard.

What other advice do I have?

It is important to prioritize security if managing data in multi-cloud environments. Having a technical team familiar with cloud security is recommended. Working closely with Check Point's support team can help in navigating complex terminologies and enhancing security across cloud platforms.

I'd rate the solution eight out of ten.

Which deployment model are you using for this solution?

Public Cloud

If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

Other


    dharani a.

Change tracking is available in network security module

  • August 20, 2024
  • Review provided by G2

What do you like best about the product?
We can able to track the changes of network security group rules and we can able to visualise the vpc route traffics detailly and can manage the configured IP address and it's CIDR.
What do you dislike about the product?
The change tracking of network security group rules is available only in AWS.
What problems is the product solving and how is that benefiting you?
We can easily find and manage the server IP address on single console


    SanjayPatel3

Has an improved GUI, unified security management, and is fairly easy to deploy

  • July 24, 2024
  • Review provided by PeerSpot

What is our primary use case?

The solution is primarily used for security.  We had 48 to 50 firewalls for data center segmentation. All data centers were fitted into multiple zones. Each zone had a different data classification. We had the firewalls deployed on several overseas remote sites.

How has it helped my organization?

For nearly three and a half years, the solution was doing pretty good security. It provides scalability in terms of the multiple firewalls that can be connected with the cluster as well. It offers us easy signature updates and rule changes. We just prepare one rule and then select how many firewalls you want to push. It is easy in terms of the management. 

What is most valuable?

The GUI is getting better. It's more neat and clean now.

Its security and the definition of signatures are pretty good. Especially when you use those firewalls for a website, they pick up the signature very quickly. 

Security is based on two kinds of things. One is based on the IP addresses and port numbers. Another is based on the application. 

CloudGuard Network Security provides you with unified security management across hybrid clouds and on-prem. I used it only for the cloud. If you're using VMware, you can use that on-prem as well. 

What needs improvement?

The GUI hadn't been that good. However, they fixed that and the GUI is pretty good now.

There may be some latency. In the beginning, you won't really notice - when you have 10 to 15 sessions. However, if you have 40,000 sessions and you are running the dev check in the background, then you will start to notice some issues. It's probably under milliseconds.

It's not as organized as a Palo Alto solution.

We wanted to go with the Azure Network solutions, and CloudGuard was a big expansion compared to Azure Dev, which is a built-in dev solution. I hear Azure is integrating Palo Alto as a back-end solution.

I had a high level of confidence in CloudGuard Network Security. We used it for nearly six months and were comparing different products. I'd rate it at an eight or nine out of ten.

For how long have I used the solution?

I've used the solution for four to four and a half years. 

What do I think about the stability of the solution?

The solution is very stable. I'd rate the stability eight or nine out of ten. 

What do I think about the scalability of the solution?

We didn't really check for scalability. We were more focused on features. I'm not sure how well it would scale.

We had the solution in multiple locations. When we tested it, we did so across around 100 customers. 

How are customer service and support?

The product was really good, so we didn't really deal with technical support. 

Which solution did I use previously and why did I switch?

Our company migrated from Check Point to Palo Alto. I've noticed there are big changes in the Palo Alto GUI. It's neat and clean in comparison. The site was easier to navigate. Check Point has the same features; however, it's not as clear. If you are searching for something, you need to click around. It's not really well organized.

We've also used Azure and decided to go in that direction. 

How was the initial setup?

The deployment wasn't really complex. It depends on if you are familiar with the solution and if you follow the best practices. It's not hard to do a POC design. Within four weeks, you'd have the solution up and running. 

Our infrastructure was 100% Azure, so it was much easier for us to deploy the POC. 

It was pretty easy to configure. 

What was our ROI?

You can save maybe 30% on costs by deploying this solution.

What's my experience with pricing, setup cost, and licensing?

CloudGuard is pretty expensive. Azure ends up being cheaper. 

They are fairly priced. It's not cheap. However, you definitely need to spend some dollars on security. 

While it's rather fair pricing, it was more about us having the right solution for the user base. 

What other advice do I have?

For a few reasons, we decided not to go with it compared to the cloud vendor's firewall. One was the technology and integration itself. You can integrate CloudGuard into many third-party tools. However, it adds extra cost. Also, if we could find something in the Azure ecosystem, we don't need to go for a third party. That's why we decided to go with Azure. 

I have not yet used its AI capabilities. That said, my understanding is that they have very good tools and built-in initial learning capabilities that can help you begin to understand the traffic.

I would recommend the solution to others, and I have never had issues with the product itself. However, we were looking for Azure-native tools, which is why using this long-term didn't work out. 

I'd rate the solution eight out of ten. I'd rate it a nine if I was 100% sure you could control ransomware attacks. I'm not sure if you can do that fully with CloudGuard. 


    IdoSarusi

Provides reasonable security for network at a reasonable price

  • July 02, 2024
  • Review provided by PeerSpot

What is our primary use case?

When we build security for companies, we use the cloud of services for building and configuring networks and Security on the company Network, including EDR or XDR on the computers, routers, and switches.

How has it helped my organization?

The customer gets reasonable security for their network at a reasonable price, except for Check Point's expensive router. Overall, the product is reasonably priced.

What is most valuable?

The router's anti-bot feature and network security for detecting malware and preventing its spread are critical components. Additionally, there are other features like antivirus, anti-malware, and a firewall. The anti-bot feature can detect if one device is hacked and has malware. It monitors the communication to and from this device and can detect and block the malware when it spreads to other computers on the network.

What needs improvement?

Every good security product requires a company with many research departments and staff. This ensures that the product is always up to date on the most relevant security threats. An excellent expert team of researchers on vulnerabilities and new cyber threats could exist.

They should start integrating AI more into the product to make it easier to use

For how long have I used the solution?

I have been using Check Point CloudGuard Network Security for one year and a half.

What do I think about the stability of the solution?

The product is stable if deployed correctly. I rate the solution’s stability a nine out of ten.

What do I think about the scalability of the solution?

I rate the solution’s scalability a nine out of ten.

How was the initial setup?

The initial setup was neither easy nor difficult.

What's my experience with pricing, setup cost, and licensing?

The product is expensive.

What other advice do I have?

Check Point is a reliable company for network security. I trust them to protect my resources when using their products. However, their solutions could be improved to be more user-friendly and easier to integrate.

I recently implemented Check Point CloudGuard Network Security for our company's new customers. I installed the features and products after consulting with them. Setting up the network configuration was moderately complex and required careful attention. Check Point offers extensive configuration options, providing enhanced control and security, although it may require more setup effort initially.

I advised others to configure their product correctly.

Overall, I rate the solution an eight out of ten.

Which deployment model are you using for this solution?

Private Cloud


    reviewer2379468

Offers advanced threat prevention capabilities, network visibility, and control

  • March 15, 2024
  • Review from a verified AWS customer

What is our primary use case?

I use CloudGuard Network Security to enhance our cloud exchange points' security. Our customers can seamlessly connect across multiple clouds within the region, and CloudGuard provides next-generation firewall services to ensure their data and applications are protected.

How has it helped my organization?

CloudGuard Network Security has significantly improved our organization by helping us tap into the Check Point customer market.

What is most valuable?

The VPN features in CloudGuard Network Security have been the most valuable for us. It allows us to scale securely within our infrastructure, providing both strong security and VPN capabilities.

What needs improvement?

In the next release, including VRF support would be highly beneficial. Many customers have been requesting this feature, as it is currently lacking in Check Point's offerings, which can make architectural designs more cumbersome compared to competitors.

For how long have I used the solution?

I have been working with CloudGuard Network Security for two and a half years.

What do I think about the stability of the solution?

As for scalability, it could be even better with VRF support, as it would allow for more efficient scaling without the need to deploy separate firewalls for different workloads.

What do I think about the scalability of the solution?

CloudGuard Network Security has been quite stable.

How are customer service and support?

I would rate technical support for CloudGuard as an eight out of ten.To make it a ten, I would expect more proactive assistance and smoother transitions between support levels.

How would you rate customer service and support?

Positive

Which solution did I use previously and why did I switch?

When comparing CloudGuard Network Security to other solutions like Fortinet and Palo Alto Firewalls, they are similar in terms of identifying security threats. They all offer robust features such as antivirus, deep packet inspection, and IPS. Some of our customers have transitioned from Palo Alto to Check Point. While I don't have specific reasons, it could be related to factors like pricing.

How was the initial setup?

We deployed it across multiple locations, utilizing AWS for SMS management. The environment was designed to ensure security and privacy, with all deployments being private despite being in the public cloud. Our implementation strategy was flexible, depending on the customer's needs, focusing on workload security first and then gradually migrating workloads. The initial deployment was straightforward.

Which other solutions did I evaluate?

One significant difference between CloudGuard Network Security and other solutions is the lack of VRF support. This means that when dealing with customers who have multiple segments and exchange points, deploying new firewalls becomes necessary. Competitors' solutions typically include VRF support, making scaling much easier and eliminating the need for additional firewall purchases.

We chose CloudGuard over other vendors because it allows us to provide unified security across multiple cloud providers like AWS, Azure, and Google Cloud. Unlike native cloud firewalls, CloudGuard offers scalability and the ability to expand across different platforms, meeting our customers' needs for consistent security across diverse cloud environments.

What other advice do I have?

We implemented CloudGuard Network Security to meet our customers' demands for enhanced security features and centralized management. They specifically requested Check Point CloudGuard for its robust capabilities, including SMS and MDS for global management.

Using CloudGuard Duo Security has provided us with the ability to manage globally through MDS, which has been a valuable capability. It is convenient to have multiple pockets of global management from UniFi OS.

We realized the benefits of CloudGuard Duo Security quickly after deployment. Understanding the architecture, especially the MDS setup for higher-level organization control, allowed us to establish multiple pockets of management efficiently.

Unified security management allows us to streamline our security operations significantly. With centralized management through SMS and MDS, we can efficiently oversee not only the firewalls within our cloud exchange points but also on-premises devices, enabling a cohesive and unified security architecture across all environments.

I'm very confident in CloudGuard Network Security because it helps us secure our global network. With CloudGuard, we can set up rules to protect against risks from on-premises traffic and ensure security through various measures like single sign-on integration and VPN restrictions.

CloudGuard Network Security is a great product that fulfills firewall needs effectively and provides detailed insights. However, in multi-segment environments requiring multiple VRFs, it can be cumbersome and costly due to the need for separate firewalls.

The best lesson I have learned from using CloudGuard Network Security is to carefully consider the scalability requirements of each environment. While Check Point offers robust features, the lack of VRF support can lead to increased costs and complexity, especially in multi-segment setups where separate firewalls are needed for each segment.

Overall, I would rate CloudGuard Network Security as an eight out of ten.

Which deployment model are you using for this solution?

Hybrid Cloud