CloudGuard Network Security Solution Brief

CloudGuard provides industry-leading advanced threat prevention and cloud network security for your public, private and hybrid-clouds

Today’s Forecast: Cloudy

The desire to transition from a hardware-centric to an application-centric network construct is driving more and more organizations to embrace the cloud as part of their IT strategy. As a result, businesses are rapidly adopting cloud-based solutions to virtualize their datacenters as well as extend applications and data to public cloud environments. However, security concerns associated with moving data beyond traditional IT controls keeps many organizations from fully embracing the cloud. Businesses want the ability to control their own data and keep it private, protect themselves from cyber threats and securely connect their cloud with their traditional on-premises network, all while maintaining compliance with regulatory mandates.

CLOUDGUARD NETWORK SECURITY

• Most secure threat prevention with industry-leading catch rate of malware, ransomware and other types of attacks
• Supports the widest range of public, private and hybrid-clouds
• Enables scalability, high availability, elasticity, efficiency, rapid deployment, agility and automation of CI/CD workflows

KEY PRODUCT BENEFITS

• Advanced threat prevention
• Cloud network security orchestration and automation
• Consolidated and consistent visibility and management across all clouds

KEY PRODUCT FEATURES

• Security features include Firewall, DLP, IPS, Application Control, IPsec VPN, Antivirus and Anti-Bot. Threat Extraction and Threat Emulation for zero-day attacks.
• Threat Extraction removes exploitable content, and promptly delivers sanitized content to users.
• Threat Emulation prevents infections from new malware and targeted attacks, using threat sandboxing with the best possible catch rate, and is virtually immune to evasion techniques.
• SSL/TLS traffic inspection with traffic forwarding and SNI support for advanced threat prevention inside secure SSL traffic.
• Unified Security Management provides consistent security policy management, enforcement, and reporting for public, private, hybrid-clouds and on-prem networks in a single pane-of-glass.
• Seamless cloud-native integration with Azure, AWS, Google Cloud, Oracle Cloud, Alibaba Cloud, Huawei Cloud, Tencent Cloud, IBM Cloud, Cisco ACI, VMware ESXi/NSX, Nutanix AHV, KVM and OpenStack.

CloudGuard Network Security

Check Point CloudGuard Network Security is designed to keep your data in public, private and hybrid cloud networks safe from even the most sophisticated attacks. To help customers fulfill their cloud security responsibilities, Check Point partners with the leading public IaaS providers and SDN solutions to seamlessly provide the same comprehensive security protections safeguarding premises-based networks to cloud environments.

CloudGuard enhances the native micro-segmentation and elastic networking of cloud environments to dynamically deliver advanced security and consistent policy enforcement that automatically grows and scales with your cloud environments. Using CloudGuard, you can easily secure workloads and applications running in hybrid and public cloud environments, thus mitigating risks from breaches, data leakage and zero-day threats.

Whether your cloud strategy centers on public or hybrid cloud environments, multi-cloud routing, or cloud DMZ, Check Point helps secure all your cloud assets while fully supporting the elastic and dynamic nature of the cloud. CloudGuard delivers a single pane-of-glass experience when managing physical, virtual and cloud-based security, and consolidates logs and reporting across all network environments.

With Check Point, you can enforce a consistent security policy for corporate assets across both virtual and physical infrastructures, dramatically simplifying compliance with regulatory mandates. Check Point CloudGuard Network Security provides comprehensive threat prevention security, access, identity, strong authentication, compliance reporting and multi-cloud connectivity to help your organization embrace the cloud with confidence.

Data Center Virtualization and Network Function Virtualization (NFV)

Check Point CloudGuard is designed to support popular hypervisor technologies such as VMware ESX, Microsoft Hyper-V and KVM, delivering comprehensive security to protect dynamic virtualized environments from internal and external threats. CloudGuard also delivers advanced, multi-layered security for virtual data center and Network Function Virtualization (NFV) environments, equipping service providers with comprehensive threat prevention security, zero-day protection, agile delivery, management, and automation across core network function, software-defined WAN and vCPE deployments.

Private Cloud Security

Network virtualization has created a dramatic shift in traffic behavior. Now, more and more traffic is going East–West in the data center creating security gaps and other challenges. With few controls to secure East–West Traffic, threats can now travel unimpeded once inside the data center.

Supporting leading network virtualization solutions, CloudGuard enhances native micro-segmentation capabilities to provide proactive protections for East–West traffic inside virtual data centers. Check Point also integrates with private Cloud Management platforms such as VMware NSX, VMware vCenter, Nutanix AHV, Cisco ACI, Microsoft Azure Stack and OpenStack to facilitate automated security service insertion, context sharing of security groups, tags and threat information as well as automated quarantine and remediation of infected VMs.

CloudGuard gives customers complete traffic visibility and reporting in addition to proactive protection from even the most advanced threats within virtual network environments. Check Point CloudGuard delivers advanced threat protections to prevent the lateral spread of threats within software-defined data centers as well as the visibility and control to effectively manage security in both physical and virtual environments—all from a single unified management solution.

Public Cloud Security

Moving computing resources and data to public clouds means security responsibilities are now shared between you and your cloud provider. While infrastructure protection is delivered by the cloud provider, customers want the ability to control their own data and protect their cloud assets all while complying with regulatory mandates.

Check Point CloudGuard seamlessly extends advanced security protections to leading public and hybrid cloud environments such as Amazon Web Services, Microsoft Azure, Google Cloud, VMware Cloud on AWS, Alibaba Cloud, Huawei Cloud, Tencent Cloud, IBM Cloud, Oracle Cloud Infrastructure and more. Flexible and expandable, CloudGuard fits the dynamic needs of public cloud deployments, enabling secure connectivity from enterprise premises networks to the cloud while inspecting all data entering and leaving private subnets in virtual private clouds (VPCs).

CloudGuard provides consistent security policy enforcement and full visibility across physical, premises-based private cloud and public cloud networks.

Advanced Threat Prevention and Unified Management Across Clouds

The appetite for cloud solutions shows no signs of slowing down. Still, security concerns are often cited as a key barrier to wide-scale enterprise cloud adoption. When you move computing resources and data to cloud environments, the responsibility of security now becomes shared between you and your cloud provider. The loss of control moving applications and data out of the enterprise to a cloud provider along with the lack of consistent monitoring and governance of those resources creates a variety of new security challenges.

Seamlessly integrating with leading cloud platforms and orchestration tools, CloudGuard Network Security can be deployed in minutes while supporting key features such as dynamic security policies and elastic scalability. CloudGuard Network Security provides industry-leading advanced threat protection and single pane of glass management for easily extending comprehensive security protections to cloud environments. These powerful capabilities allow you to grow your cloud security elastically while keeping pace with the dynamic requirements of your business.

Worldwide Headquarters

5 Shlomo Kaplan Street, Tel Aviv 6789159, Israel | Tel: +972-3-753-4599

U.S. Headquarters

www.checkpoint.com