Listing Thumbnail

    CloudGuard Network Security All-In-One

     Info
    Deployed on AWS
    Free Trial
    Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
    4.4

    Overview

    Play video

    CloudGuard Network Security for AWS delivers advanced, multi-layered network security for the AWS cloud environment and protects cloud assets. Security features include Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot, Threat Extraction and Threat Emulation. CloudGuard Network Security enables secure VPN connectivity between AWS and enterprise networks, data centers and secure clients with simplified setup, deployment and management. CloudGuard Network Security includes SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic. The Check Point CloudGuard for AWS Security Blueprint provides best practices for designing a secure cloud-based deployment allowing agility, scalability and efficiency. The blueprint promotes automation of processes using APIs and supports Infrastructure As Code practices. This offering will be deployed as a single "All-In-One" CloudGuard Network Security gateway and Security Management Server via Check Point CloudFormation templates (sk111013) or via automation tools such as Ansible, Terraform, etc. This PAYG distributed security gateway is managed from a central Security Management Server which provides consistent security policy management, enforcement, and reporting within a single pane of glass.

    The Security Management Server is included in this "All-In-One" offering; there is no need to choose one of the Check Point Security Management offers.

    To maintain the highest quality and security of our management solutions, Check Point recommends installing the latest recommended Jumbo Hotfix, especially after the initial deployment.

    Highlights

    • Fully integrated and industry-leading advanced threat prevention security features include: Firewall, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Sandblast adds Threat Extraction (removes exploitable content & promptly delivers sanitized content to users) and Threat Emulation (prevents infections from new malware & targeted attacks using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques). Includes Security Management Server.
    • Provides advanced threat prevention to inspect traffic entering and leaving private subnets in the VPC ("North-South") as well as between VPCs ("East-West"). Designed for the dynamic security requirements of cloud deployments, CloudGuard Network Security is cloud-native: it seamlessly integrates with native AWS controls to enable rapid deployment, while supporting network segmentation, AWS Transit Gateway, auto-scaling and high availability across multiple Availability Zones.
    • Check Point is an APN Advanced Technology Partner with Networking and Security Competencies. CloudGuard Network Security is integrated with a broad range of AWS services, including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, Amazon CloudWatch, AWS Security Hub, AWS Transit Gateway, AWS CloudTrail and VPC Flow Logs. CloudGuard Network Security also provides a library of CloudGuard CloudFormation templates (CFTs) to simplify deployment.

    Details

    Delivery method

    Delivery option
    64-bit (x86) Amazon Machine Image (AMI)

    Latest version

    Operating system
    OtherLinux Gaia 3.10

    Deployed on AWS
    New

    Introducing multi-product solutions

    You can now purchase comprehensive solutions tailored to use cases and industries.

    Multi-product solutions

    Features and programs

    Buyer guide

    Gain valuable insights from real users who purchased this product, powered by PeerSpot.
    Buyer guide

    Financing for AWS Marketplace purchases

    AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
    Financing for AWS Marketplace purchases

    Pricing

    Free trial

    Try this product free for 30 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.

    CloudGuard Network Security All-In-One

     Info
    Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time. Alternatively, you can pay upfront for a contract, which typically covers your anticipated usage for the contract duration. Any usage beyond contract will incur additional usage-based costs.
    Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator  to estimate your infrastructure costs.

    Usage costs (181)

     Info
    • ...
    Dimension
    Cost/hour
    c6in.xlarge
    Recommended
    $0.91
    r5.xlarge
    $0.91
    m8i-flex.16xlarge
    $11.50
    r6i.24xlarge
    $15.34
    m8i.metal-48xl
    $48.67
    m7i-flex.2xlarge
    $1.50
    r6i.4xlarge
    $3.00
    m5.16xlarge
    $3.00
    r5.12xlarge
    $8.35
    m7i-flex.16xlarge
    $11.50

    Vendor refund policy

    Terminate the instance at any given time to stop incurring charges.

    How can we make this page better?

    We'd like to hear your feedback and ideas on how to improve this page.
    We'd like to hear your feedback and ideas on how to improve this page.

    Legal

    Vendor terms and conditions

    Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .

    Content disclaimer

    Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.

    Usage information

     Info

    Delivery details

    64-bit (x86) Amazon Machine Image (AMI)

    Amazon Machine Image (AMI)

    An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.

    Additional details

    Usage instructions

    Once the instance is running, connect to it using SSH, set an admin password using: 'set user admin password' followed by 'save config'. Then connect to https://[instance] using Internet Explorer (IE) to finalize the configuration. Notes:

    1. SSH password authentication is disabled in /etc/ssh/sshd_config
    2. For information regarding Firefox and Chrome refer to sk121373.

    Support

    Vendor support

    This offer includes Premium Support. For the full list of included support services visit: https://www.checkpoint.com/support-services/support-plans/  To open a support ticket, you would need to have a Check Point user center account. If you do not have a user center account, you can sign up for one here: https://accounts.checkpoint.com . Need support? Contact us at https://www.checkpoint.com/support-services/contact-support/ 

    AWS infrastructure support

    AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.

    Product comparison

     Info
    Updated weekly

    Accolades

     Info
    Top
    10
    In Data Analytics
    Top
    10
    In Network Infrastructure
    Top
    10
    In Network Infrastructure, Security

    Customer reviews

     Info
    Sentiment is AI generated from actual customer reviews on AWS and G2
    Reviews
    Functionality
    Ease of use
    Customer service
    Cost effectiveness
    Positive reviews
    Mixed reviews
    Negative reviews

    Overview

     Info
    AI generated from product descriptions
    Network Traffic Inspection
    Advanced multi-layered network security with SSL/TLS traffic inspection and traffic forwarding capabilities
    Threat Prevention Mechanisms
    Includes Threat Extraction, Threat Emulation, Antivirus, and Anti-Bot protection using sandboxing techniques
    Cloud Security Integration
    Native integration with AWS services including AWS GWLB, AWS Cloud WAN, AWS Outposts, Amazon GuardDuty, and AWS Security Hub
    Network Segmentation
    Supports secure VPN connectivity between AWS and enterprise networks with IPsec VPN and traffic inspection across private subnets
    Infrastructure Deployment
    Supports Infrastructure as Code practices with CloudFormation templates and automation tools like Ansible and Terraform
    Network Traffic Protection
    Advanced cloud-native firewall service powered by FortiOS and FortiGuard Labs threat intelligence for securing cloud network traffic
    Threat Intelligence
    AI-powered intrusion prevention (IPS), data leak prevention (DLP), and advanced filtering capabilities to block malicious traffic and potential security breaches
    Dynamic Policy Management
    Security policies that dynamically use cloud metadata tags to follow cloud workloads without requiring static IP updates
    Geo-Specific Security Control
    Enforcement of compliance policies through geo-IP blocking and traffic restrictions to/from specified countries
    Multi-Account Security Aggregation
    Capability to consolidate security across multiple VPCs and accounts within an AWS region using a single firewall instance
    Threat Prevention
    Advanced machine learning-powered inspection engine that detects known and zero-day threats including exploits, malware, spyware, and command and control attacks
    Web Security
    Inline machine learning-based web security engine for real-time detection of phishing, ransomware, and evasive web-based attacks
    File Analysis
    Proprietary cloud-based hypervisor for static and dynamic file-based threat detection using advanced sandbox analysis techniques
    Protocol Layer Security
    Comprehensive security coverage across network layers including DNS-layer attack prevention and network data exfiltration detection
    Traffic Visibility
    Complete application layer-7 traffic inspection and control with dynamic policy management based on AWS tags, application IDs, and user contexts

    Contract

     Info
    Standard contract
    No
    No
    No

    Customer reviews

    Ratings and reviews

     Info
    4.4
    248 ratings
    5 star
    4 star
    3 star
    2 star
    1 star
    31%
    61%
    7%
    0%
    0%
    30 AWS reviews
    |
    218 external reviews
    External reviews are from G2  and PeerSpot .
    PedroPereira4

    Unified cloud security has simplified multi-cloud protection and has improved policy consistency

    Reviewed on Dec 03, 2025
    Review from a verified AWS customer

    What is our primary use case?

    I use Check Point CloudGuard Network Security  mainly to protect cloud workloads and applications across multi-cloud environments. Day-to-day, I rely on it for managing cloud-based firewalls, enforcing unified security policies across accounts and regions, and continuously monitoring traffic and threat activity to keep our cloud infrastructure secure.

    In addition to protecting workloads and managing cloud firewalls, I also use Check Point CloudGuard Network Security  to maintain a consistent security posture across multiple cloud providers.

    What is most valuable?

    The best features Check Point CloudGuard Network Security offers include unified multi-cloud firewall and network security, real-time threat prevention, and automated detection of anomalies, which helped us catch misconfigurations.

    The unified multi-cloud firewall feature helps me manage and enforce firewall rules consistently across different cloud providers and accounts. Centralized visibility and monitoring of cloud network activity is another helpful feature of Check Point CloudGuard Network Security that makes compliance audits and security reviews easier.

    Check Point CloudGuard Network Security has positively impacted my organization by providing ease of use between different clouds. It has strengthened our overall cloud security posture and reduced the number of configuration-related issues that used to slip through. We have seen fewer unauthorized traffic flows, faster detection of anomalies, and clearer visibility across all cloud environments.

    Check Point CloudGuard Network Security is deployed fully in public cloud. It provides unified security management across hybrid clouds. For security operations, this has reduced fragmentation and made it easier to maintain uniform policy across environments. It also shortens investigation time because all logs, events, and traffic insights flow into one place. My team does not have to switch tools or reconcile different rule sets, and this consistency lowers the risk of misconfiguration.

    What needs improvement?

    Several areas of Check Point CloudGuard Network Security could be improved. The dashboard is comprehensive, but navigating advanced views can take time for administration, so the learning curve is somewhat high. Some automation workflows required additional tuning to work smoothly in complex multi-account setups. Integration with third-party cloud-native tools could also be broader to reduce reliance on custom configuration.

    For how long have I used the solution?

    I have been using Check Point CloudGuard Network Security for approximately two years.

    What do I think about the stability of the solution?

    Check Point CloudGuard Network Security is stable.

    What do I think about the scalability of the solution?

    The scalability of Check Point CloudGuard Network Security is solid.

    How are customer service and support?

    Customer support for Check Point CloudGuard Network Security is good. I would rate the customer support a solid 10.

    How would you rate customer service and support?

    Positive

    Which solution did I use previously and why did I switch?

    I previously used a mix of native cloud firewalls and FortiGate appliances. I switched because managing multiple tools across different clouds became too time-consuming.

    What was our ROI?

    I have seen a return on investment with Check Point CloudGuard Network Security. The time saved was significant because now we have everything in the same place. We have fewer false positives, so my coworkers have time to look at other projects.

    Which other solutions did I evaluate?

    We evaluated solutions such as Palo Alto Prisma Cloud and Fortinet's FortiGate. Compared to them, Check Point CloudGuard Network Security was slightly easier to manage overall. Its unified console and policy management model made setup faster and central control simpler. The trade-off is that Check Point CloudGuard Network Security feels less customizable in deeply complex scenarios.

    What other advice do I have?

    It has made me more confident overall in secure cloud deployments and migrations. Knowing that the same security controls follow us as we move workloads or spin up new ones removes a lot of stress. We do not have to rebuild policies from scratch or worry about gaps during migrations, which makes cloud projects smoother and faster to roll out.

    I utilize Check Point CloudGuard Network Security alongside Harmony  Endpoint and a few on-premises Check Point gateways. They all tie back into the same management console, so policies, logs, and threat data flow into one place, making it easier to keep everything consistent.

    I would suggest planning your policy structure early and keeping it consistent across accounts to avoid complexity later. I would rate this product an eight out of ten.

    Which deployment model are you using for this solution?

    Public Cloud

    If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?

    Eliezer P.

    Real-Time Visibility and Efficient Comprehensive Protection

    Reviewed on Nov 25, 2025
    Review provided by G2
    What do you like best about the product?
    I love the real-time visibility that Check Point CloudGuard Network Security provides me regarding cloud security. This allows me to respond effectively to incidents, which is crucial for protecting our data and operations. I also greatly value the comprehensive protection it offers for cloud environments. I like it because it covers all the security aspects I need, ensuring that all our areas are adequately protected. These features make this tool a vital part of our IT security strategy.
    What do you dislike about the product?
    Integration with more cloud platforms.
    What problems is the product solving and how is that benefiting you?
    I use Check Point CloudGuard Network Security to protect against threats and network attacks. It provides me with real-time visibility and comprehensive protection, allowing me to respond effectively to incidents and secure all aspects of cloud security.
    Aaron M.

    Worry-Free Operation Delivers Total Peace of Mind

    Reviewed on Nov 25, 2025
    Review provided by G2
    What do you like best about the product?
    I really like how it does not need much set up. It is great for security and provides simple solutions to a complex problem. It has been a great addition.
    What do you dislike about the product?
    I have not experienced any downsides to the product. It has functioned as described and has become part of every day work. When there is an issue, it is quickly corrected.
    What problems is the product solving and how is that benefiting you?
    It is helping staff feel more secure when online. It is also supporting our growth. It has worked to improve efficiency and overall productivity. We do not worry about online security.
    Sujit S.

    Powerful Cloud Security with Centralized Management, Minor Room for Improvement

    Reviewed on Nov 20, 2025
    Review provided by G2
    What do you like best about the product?
    I like Check Point CloudGuard because it provides strong, advanced threat protection that goes beyond native cloud firewalls. It also gives a single, centralized console to manage security across multiple clouds. Policies are dynamic and update automatically using tags and identities, which reduces manual work. Overall, it makes cloud security simpler, consistent, and more powerful.
    What do you dislike about the product?
    I dislike that Check Point CloudGuard can be complex to deploy and manage, especially for beginners. It also requires higher skill levels compared to native cloud firewalls. Licensing and costs can be confusing and sometimes expensive for small teams. Updates and troubleshooting often depend heavily on Check Point TAC, which can slow things down.
    What problems is the product solving and how is that benefiting you?
    CloudGuard helps solve the challenge of securing workloads across multiple clouds with one consistent policy. It protects against advanced threats that native cloud firewalls can’t block. It also automates security using tags and identities, reducing manual work. Overall, it improves visibility, strengthens protection, and saves a lot of operational time.
    Computer Software

    Powerful Threat Prevention with an Intuitive Dashboard

    Reviewed on Nov 19, 2025
    Review provided by G2
    What do you like best about the product?
    During the trial, We really liked how the dashboard clearly showed the threats, polices without overwhelming the team. The threat prevention engine is very strong and it blocks traffic smartly.
    What do you dislike about the product?
    One issue we noticed is that the initial setup feel a bit complex for our team. There are quite few configuration steps and it takes some time to fully understand everything.
    What problems is the product solving and how is that benefiting you?
    CloudGaurd Network Security helped us strengthen our Zero Trust approach by giving us very clear control over which resources can communicate in in our cloud environment. It provides a solid firewall layer and cloud data security. During the trial, it made it much easier to identify risky traffic and block unauthorized access attempts. Overall it was so helpful for our team.
    View all reviews