# CHECK POINT CLOUDGUARD # ADVANCED CLOUD SECURITY FOR GEN V THREATS ## CLOUDGUARD Secure Your Cloud with Confidence ## Portfolio Benefits for AWS clouds - Protect **all cloud services** at scale as your AWS environments evolve - **Agility & Elasticity** that keeps pace throughout your cloud journey ## Portfolio Features ## Network - Data Plane ✓ Automated Security Blueprint for AWS and hybrid cloud environments ✓ Advanced Threat Protection - Next Generation Firewall - Application and Data Security - Advanced Threat Prevention - Forensic Analysis ## Identity ✓ Robust Identity Protection blocks account takeovers on SaaS apps and protects privileged accounts from causing a catastrophic event on AWS ! ✓ AI-Powered Phishing Protection blocks sophisticated phishing attacks on cloud-based email ## Control Plane – Security & Compliance ## INTRODUCING CHECK POINT CLOUDGUARD TM ✓ Powerful Visualization of network topology and workflows ✓ Instant In-place and Auto-remediation of vulnerabilities and misconfigurations ✓ Privileged Identity Protection augmenting AWS security features ✓ Active Protection for always-on security enforcement ✓ Cloud Security Intelligence tool for contextual visualization, threat analytics and forensics ✓ Governance & Continuous Compliance ## CURRENT BUSINESS CLIMATE: CLOUDY The need to increase business agility is driving more organizations to the cloud. So much so that the analyst firm Gartner predicts worldwide public cloud services revenue will reach over $411 billion by 2020. Therefore it’s no surprise that nearly 95 percent of businesses are currently using the cloud for public cloud networking, public/private/hybrid networks, SaaS-based applications or all of the above. Organizations are able to accelerate product time-to-market by leveraging cloud services instead of spending countless resources and time designing, deploying and managing physical infrastructure. The digital transformation age provides a paradigm shift in the way enterprise organizations utilize Information Technology, with the cloud playing a significant role and continuing to expand business opportunities across all industries going forward. ## NOT EVERY CLOUD HAS A SILVER LINING Despite rapid cloud adoption, security of workloads, assets and data in the cloud remains a top concern. Moving applications and workloads to the cloud creates unique security challenges which may expose businesses to a host of new threats. Compounding this issue is the fact that cloud security is a shared responsibility. Cloud service providers deliver strong security controls to protect the storage/infrastructure plane but have no knowledge of “normal” customer traffic and thus are unable to determine malicious content or activity from what is benign. At the same time, it is up to your organization to implement robust security protections for your data and control plan to make sure your cloud workloads, assets and applications are never left exposed. It is time for a new security model; one that delivers a complete architecture focused on preventing attacks, provides true ease of operation and is able to scale to meet the dynamic nature of cloud environments. ## TM INTRODUCING CHECK POINT CLOUDGUARD Check Point CloudGuard, a comprehensive cloud security portfolio, is designed to prevent the latest fifth generation, multi-vector cyberattacks targeting enterprise cloud services. As part of the Infinity Architecture, the portfolio includes **CloudGuard IaaS** which provides advanced threat prevention for enterprise networks on Amazon Web Services (AWS) and hybrid clouds, **CloudGuard Dome9** that delivers security and compliance automation for the public cloud, and **CloudGuard SaaS** that prevents targeted attacks on SaaS applications and cloud-based email. Whether your business strategy centers on enabling cloud applications and platforms, public or hybrid infrastructure, CloudGuard ensures your assets are fully protected while supporting the cloud’s elastic, dynamic and cost effective nature. **CloudGuard – Any Cloud, Any Application, Unmatched Security.** --- ! ## CLOUDGUARD IAAS Process efficiencies and increased network agility are driving IaaS and SDN technology adoption at a rapid pace. But these new infrastructures also present businesses with a unique set of security challenges. Check Point CloudGuard IaaS protects assets in the cloud from the most sophisticated Gen V cyber-threats with dynamic scalability, intelligent provisioning and consistent control across physical and virtual networks. CloudGuard IaaS supports AWS and hybrid cloud platforms. Advanced features such as auto-provisioning and auto-scaling along with automatic policy updates ensure security protections keep pace with all changes to your AWS cloud. Additionally, CloudGuard IaaS supports a single unified console for consistent visibility, policy management, logging, reporting and control across your entire cloud environment. ! CloudGuard Dome9 is an innovative platform that allows enterprises to easily manage the security and compliance of their AWS cloud environments at any scale. CloudGuard Dome9 uses the native security controls provided by AWS to protect all cloud resources, including built-in services such as Amazon RDS, AWS Lambda functions and Amazon EC2 instances, ! CloudGuard Dome9 offers technologies to visualize and assess security posture, detect misconfigurations, model and actively enforce gold standard policies, protect against attacks and insider threats, cloud security intelligence for threat analytics, and to meet regulatory compliance requirements and security best practices. Businesses use CloudGuard Dome9 for faster and more effective cloud security operations, pain-free compliance and governance, and agile DevSecOps practices. ## CLOUDGUARD DOME9 ## CLOUDGUARD SAAS Organizations seeking to optimize business operations and reduce costs are increasingly moving to cloud applications via software-as-a-service (SaaS). However, SaaS applications expose businesses to a variety of risks ranging from email phishing attacks and zero-day malware, to SaaS account hijacking. CloudGuard SaaS, a SaaS in its own right, blocks attacks on SaaS applications and cloud-based email. While most SaaS security solutions focus on application control and data leakage, CloudGuard SaaS takes security to the next level. More than just a Cloud Access Security Broker (CASB), CloudGuard SaaS prevents targeted attacks intended to steal data on SaaS. It provides complete protection against malware and zero-days, sophisticated phishing attacks, and hijacking of employee SaaS accounts. Users also gain instant visibility into unsanctioned SaaS applications in use (‘Shadow IT’) and data protection. ## SUMMARY Security is often cited as a key barrier to the wide-spread adoption of an enterprise cloud. Managing security and compliance in the cloud requires a new breed of tools that prevent against evolving cybersecurity attacks, fatal misconfigurations, actively protect applications and workloads, maintain compliance, and enable the cloud to stay agile and elastic. The Check Point CloudGuard portfolio offers a comprehensive advanced threat prevention and cloud security orchestration solution for enterprise cloud networks, data and applications. Additionally, Check Point supports single-click and agile deployment models aligned with the dynamic nature of the cloud, making adoption and expansion of cloud services a breeze.