Check Point Quantum CloudGuard Network Security (CGNS)

Check Point Quantum CloudGuard Network Security (CGNS), identified by manufacturer part number CPSB-NGTP-CG, is a virtual security gateway software platform engineered for cloud-native and data-center environments. Built on Check Point's Quantum Security Gateway architecture, it delivers next-generation threat prevention capabilities as a software-defined appliance that can be instantiated across major public cloud platforms including AWS, Microsoft Azure, Google Cloud Platform, and Oracle Cloud Infrastructure, as well as on-premises virtualization hypervisors such as VMware ESXi and KVM. The software gateway enforces consistent, centrally managed security policy across hybrid and multi-cloud network perimeters.

CloudGuard Network Security integrates Check Point's AI-powered ThreatCloud Intelligence engine, which aggregates real-time threat data from hundreds of millions of sensors and translates it into inline prevention across the full NGFW blade stack. Core protection capabilities include Intrusion Prevention System (IPS), Application Control, URL Filtering, Anti-Bot, Anti-Virus, and SandBlast Zero-Day Protection with threat emulation and threat extraction. The platform supports Identity Awareness and IPsec VPN, enabling encrypted site-to-site and remote-access connectivity for cloud workloads. All blades are licensed and managed through a unified Security Management architecture, allowing a single policy to span physical, virtual, and cloud gateway instances.

The CPSB-NGTP-CG SKU corresponds to the Next-Generation Threat Prevention (NGTP) software blade bundle for CloudGuard, which activates IPS, Application Control, URL Filtering, Anti-Bot, and Anti-Virus as a packaged subscription entitlement. Gateway instances are deployed as virtual machine images or cloud marketplace offerings and scale horizontally to meet dynamic workload throughput demands. CloudGuard NGTP integrates with Check Point Infinity architecture and is managed via SmartConsole or the Infinity Portal, supporting automated policy provisioning through CloudGuard Controller and native cloud-provider APIs for dynamic object synchronization.

Ideal for

• Enforcing next-generation firewall policy and advanced threat prevention at the ingress/egress perimeter of AWS VPCs, Azure VNets, or GCP VPCs to protect east-west and north-south cloud traffic
• Securing hybrid-cloud connectivity by terminating IPsec VPN tunnels between on-premises data centers and cloud environments with full NGTP inspection on transit traffic
• Protecting virtualized data-center segments running on VMware NSX or KVM environments where hardware appliances are not applicable and software-defined security is required
• Providing consistent, policy-unified threat prevention across multi-cloud deployments managed from a single Check Point SmartConsole instance, reducing administrative overhead in complex enterprise environments
• Automated security provisioning in DevOps pipelines using CloudGuard Controller API integrations to dynamically enforce security group policy as cloud workloads scale up or down
• Meeting regulatory compliance requirements (PCI-DSS, HIPAA, SOC 2) for cloud-resident workloads by applying application-layer inspection, logging, and IPS controls enforced at the virtual network boundary

Technical specifications

Available from Omnixon Global. Submit an RFQ and our team will confirm configuration and availability for your order.