Check Point CloudGuard Network Security for AWS/Azure (Annual Subscription)

Check Point CloudGuard Network Security for AWS and Azure (CPSB-NGTX-CGNS-1Y) is a cloud-native next-generation firewall and advanced threat prevention platform engineered specifically for securing workloads across Amazon Web Services and Microsoft Azure environments. The solution deploys as a virtual security gateway directly within the cloud fabric, enforcing consistent enterprise-grade security policies across virtual networks, subnets, and east-west traffic flows without requiring traffic hairpinning to on-premises infrastructure. It integrates with native cloud constructs such as AWS Transit Gateway, AWS Gateway Load Balancer, Azure Virtual WAN, and Azure Route Server to deliver scalable, automated security insertion into existing cloud network architectures.

The platform delivers a full suite of Next-Generation Threat Prevention (NGTX) capabilities including IPS, Application Control, URL Filtering, Anti-Bot, Antivirus, and Check Point's SandBlast Zero-Day Protection with Threat Emulation and Threat Extraction. Traffic inspection operates at the packet and session level, with TLS/SSL inspection enabling visibility into encrypted threats. CloudGuard leverages Check Point's ThreatCloud AI intelligence engine, which aggregates threat intelligence from hundreds of millions of sensors worldwide and applies machine learning and big data analytics to deliver real-time protection against known and unknown threats.

Managed through the unified Check Point Infinity Portal or via on-premises R81.x SmartConsole, CloudGuard Network Security enables security teams to apply a single consistent policy framework spanning on-premises data centers, AWS VPCs, and Azure VNets. The annual subscription model (1-year term) covers the full NGTX blade bundle and includes access to threat intelligence updates, software releases, and the CloudGuard cloud security posture management integrations. The solution supports auto-scaling deployments, enabling gateway capacity to expand and contract dynamically in response to traffic demand, making it well-suited for large-scale, dynamic enterprise and regulated-industry cloud environments.

Ideal for

• Securing ingress and egress traffic for multi-tier AWS VPC or Azure VNet architectures with stateful next-generation firewall enforcement and TLS inspection
• Protecting containerized and microservices workloads from lateral movement by enforcing east-west micro-segmentation policies between cloud subnets and availability zones
• Meeting regulatory compliance requirements (PCI DSS, HIPAA, SOC 2) in cloud environments through enforced IPS, application-layer controls, and detailed audit-ready logging
• Extending a unified enterprise security policy from on-premises Check Point gateways into hybrid cloud deployments managed through a single SmartConsole pane of glass
• Defending cloud-hosted applications against zero-day exploits and advanced persistent threats using SandBlast Threat Emulation and Threat Extraction inline sandboxing
• Enabling auto-scaling security for variable-demand SaaS and enterprise workloads deployed behind AWS Gateway Load Balancer or Azure Gateway Load Balancer integrations

Technical specifications

Available from Omnixon Global. Submit an RFQ and our team will confirm configuration and availability for your order.