Sold by: Check Point Software Technologies
Deployed on AWS
Reduce risk and costs with fully managed Check Point firewall software infrastructure, through highly available, AI-powered threat prevention and efficient cloud native dynamic policies.
4.5
Overview
Today organizations are navigating complex cloud environments, so predictable, scalable, and consistently applied security has never been more necessary-or more challenging to deliver. Cloud Firewall as a Service addresses these pressures by providing firewall software infrastructure management by Check Point. For security and budget-minded organizations, Cloud Firewall as a Service delivers peace of mind by offloading the complexity of cloud firewall operations (like deployment, configuration, ongoing software updates, and other firewall specific maintenance tasks) to Check Point. Cloud Firewall as a Service is billed based on monthly consumption basis. Delivered through AWS Marketplace, Check Point industry-leading firewall protection (99.9% threat prevention according to Miercom tests and 100% threat prevention according to Cyberratings) delivers high security while eliminating the complex and manual effort of cloud firewall infrastructure management. Pricing is based on a Private Offer. Please reach out to Cloud_Marketplace_Support@checkpoint.com for details. Pricing is tier-structured (based on consumption per GB) for our 'NGFW', 'CloudGuard Network Security with Threat Prevention', and 'CloudGuard Network Security with Threat Prevention and SandBlast'
Highlights
- ENHANCE COMPLIANCE AND INCREASE SECURITY POSTURE: Check Point is responsible for your gateway and firewall infrastructure. Cloud Firewall as a Service provides high availability and helps ensure continuous adherence to security standards such as PCI DSS, SOX, and GDPR through advanced threat prevention.
- REDUCE MANUAL EFFORT: Eliminate hours of manual firewall infrastructure maintenance and need for deep cloud network architecture knowledge.
- INCREASE OPERATIONAL EFFICIENCY: Free up valuable IT and security resources by leveraging expert-maintained firewall infrastructure and efficient cloud-native dynamic policies.
Details
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
CloudGuard Network Security with Threat Prevention | Usage Per Hour per GB | $10,000.00 |
CloudGuard Network Security with Threat Prevention with Sandblast | CloudGuard Network Security with Threat Prevention with Sandblast | $10,000.00 |
Vendor refund policy
No Refund
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Support
Vendor support
https://supportcenter.checkpoint.com/supportcenter/portal 24x7 email support with emergency phone number. Premier support available for enterprise customers.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
A single pane-of-glass security management console delivers consistent visibility, policy management, logging, reporting and control across all cloud environments and networks
Check Point Check Point Cloud Firewall is a cloud-native security gateway that delivers automated, advanced threat prevention and multi-layered network security for assets that customers migrate to or store on AWS. Try it free for 30 days.
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and with GWLB (starting with R81.20)
**Please note: To ensure optimal operations, Check Point recommends a 4 vCores machine size. This provides balanced efficiency and smooth performance, which most customers find ideal for their needs.
Advanced threat prevention security for AWS and hybrid cloud environments, with Threat Extraction and Threat Emulation, and a built-in security management server
Customer reviews
Pharmaceuticals
Strong SASE Security with Complex Setup
Reviewed on Jun 02, 2026
Review provided by G2
What do you like best about the product?
The solution provides strong centralized security and access control for remote users and hybrid environments. I particularly appreciate the unified approach to secure connectivity, which simplifies managing VPN, web access, and policy enforcement from a single platform. It improves visibility over user traffic and helps reduce security risks without adding too much operational complexity once properly configured.
What do you dislike about the product?
While Check Point SASE provides strong security capabilities, there are some areas that could be improved. The initial configuration and onboarding process can be complex, especially for teams without prior experience with the platform. The administration interface may feel a bit dense at times, with many features spread across different menus, which can slow down navigation. In addition, troubleshooting certain connectivity or policy issues is not always straightforward and may require support assistance. Finally, documentation could be more simplified and clearer for faster adoption.
What problems is the product solving and how is that benefiting you?
In our environment, we were facing challenges related to secure remote access and consistent enforcement of security policies across distributed users and devices. Managing VPN access and ensuring secure connectivity for remote employees was becoming increasingly complex and time-consuming for the IT team.
With Check Point SASE, we are now able to centralize access control and security policies for users connecting from different locations. This has improved visibility over network traffic and reduced the need for manual intervention when handling connectivity or security issues.
As a result, we have improved operational efficiency, reduced the time spent on troubleshooting remote access problems, and strengthened overall security posture for remote and hybrid users.
With Check Point SASE, we are now able to centralize access control and security policies for users connecting from different locations. This has improved visibility over network traffic and reduced the need for manual intervention when handling connectivity or security issues.
As a result, we have improved operational efficiency, reduced the time spent on troubleshooting remote access problems, and strengthened overall security posture for remote and hybrid users.
Mohamed M.
Effective Zero Trust and VPN Management
Reviewed on Jun 02, 2026
Review provided by G2
What do you like best about the product?
I like that all user traffic is inspected and logged in one place, no matter where the connection is coming from. I appreciate the better integration between threat prevention and zero trust access that Check Point SASE offers. It's also easy to use, which makes the setup straightforward.
What do you dislike about the product?
The dashboards could use more customization options for SOC teams, specifically for the workflows.
What problems is the product solving and how is that benefiting you?
I use Check Point SASE to solve the lack of visibility into remote user traffic and eliminate the complexity of managing traditional VPN across multiple locations.
Thu-alfaqar S.
Check Point Harmony SASE: Great for Local Endpoint Performance
Reviewed on May 29, 2026
Review provided by G2
What do you like best about the product?
From an engineer’s perspective, Decentralized Security stands out because you get the security enforcement of a Cloud Web Gateway (SWG). It also delivers low latency by running a lightweight, granular filtering engine directly on the endpoint agent, so the system can enforce web filtering and processing locally. As a result, it helps reduce bandwidth strain as well.
What do you dislike about the product?
Painful integration with complex on-prem routing (non-BGP), plus log delays in the console. When a remote user complains that a critical application is being blocked, pulling up real-time, granular logs to see exactly which security layer (ZTNA, CASB, or URL Filtering) triggered the block can sometimes involve noticeable sync delays. Overall, responsiveness, per-user cost, and feature gating remain concerns.
What problems is the product solving and how is that benefiting you?
The legacy VPN vulnerability, along with SaaS and shadow IT blind spots, and the latency issues users experience, were key problems for me. This solution benefits me by containing blast radii and providing true ZTNA.
Amr A.
Best-in-Class Advanced Threat Prevention with a Unified Security Fabric
Reviewed on May 26, 2026
Review provided by G2
What do you like best about the product?
Best overall , best for advanced threats prevention , best for zero architecture, Best for Global Edge Performance, Best for Unified Security Fabric..
What do you dislike about the product?
it often introduces heavy vendor lock-in, high licensing costs, and complex migration phases that disrupt daily operations. Organizations frequently dislike the "all-in-one" feature gaps, where a vendor might offer elite security but provide weak network routing tools. Additionally, combining network and security operations forces teams to learn complex new cloud interfaces, which can lead to misconfigurations and employee frustration from overly restrictive login policies.
What problems is the product solving and how is that benefiting you?
Check Point SASE solves the performance and complexity issues of traditional networks by replacing slow, centralized VPNs with a fast global cloud network that accelerates user connection speeds by up to 10 times. It eliminates fragmented security tools by consolidating firewalls, web filtering, and Zero Trust access into a single, unified management dashboard that reduces operational costs by up to 60%. Finally, it stops cyberattacks by locking down remote user access to a strict, application-by-application basis, preventing hackers from moving laterally through your network while automatically blocking zero-day phishing and malware attempts at the edge.
Financial Services
CP Sase Inspires Confidence with AI-Powered Threat Intelligence
Reviewed on May 22, 2026
Review provided by G2
What do you like best about the product?
If I had to say the best thing about CP Sase, it’s that this product gives me confidence and trust. CP is a very common and well-known company, and that reputation matters to me. With its rich TI capacity (powered with ai), I feel I can use this product safely and with peace of mind.
What do you dislike about the product?
I can say about 2 things. First one is, this product is not cheap. It really requires well budget. This price need to be less than now. Second bad thing is its complexity. Sometimes i need to have problem when i am surfing in the modules.
What problems is the product solving and how is that benefiting you?
Most important solution to me and my company is when we are working remote, we would be in secure. With this product we really feel safe. There is one more thing about good in this product, it is fast. It makes us happy.