Solution Brief | WAF as a Service and AWS

Benefits

Deploy once within minutes

Available on AWS Marketplace, Check Point WAF as a Service delivers a non-agent web application firewall deployable within minutes. Only a one-time DNS configuration is necessary for WAF as a Service to start routing traffic securely to applications in the cloud.

Prevent DDoS and automated attacks

Check Point uses CDN delivery to guarantee continuous service and defense against Denial of Service (DDoS) attacks and bot-driven assaults. By distributing content across various servers, CDNs safeguard websites against malicious attacks such as DDoS, ensuring higher traffic management and improved resilience to hardware failures.

No more agent deployments

By routing your traffic through Check Point servers, WAF as a Service will automatically be deployed on AWS (or any public, private, or hybrid cloud environment) and will automatically provide and renew SSL certificates.

Challenges

Traditional WAFs: too time consuming to manage, too slow for cloud development

According to the Ponemon Institute, an average company needs multiple full-time security administrators to manage a traditional WAF: 45 hours per week on alerts and an additional 16 hours on rule creation. Annual costs can exceed half a million dollars.

Traditional WAFs often fall short of today’s organizational and security needs, which demand real-time prevention with minimal (ideally zero) false positives. Organizations also require solutions that deploy quickly, integrate seamlessly with AWS services, and minimize administrative overhead, ensuring effective protection without draining valuable resources. Check Point WAF as a Service provides fully managed web application and API security powered by AI/ML engines, providing maximum security with minimal administration.

Check Point WAF as a Service

A powerful fully-managed WAF for the cloud

Check Point WAF as a Service offers a complete suite of web application, generative AI, and API protection for AWS, other public and hybrid clouds, and modern network architectures. With features ranging from AI-based threat detection, API discovery, and bot prevention to file security and rate limiting, Check Point WAF as a Service is an entirely automated offering that provides the advantages of a high-quality web application firewall with minimal manual input.

Case Study: BBVA

Supporting an innovative web app rollout

BBVA, one of the largest financial institutions in the world, required protection for a large network of services, applications, and APIs. Increased visibility and easy management was needed to support wide-scale development and CI/CD automation.

Features

Beginning to use Check Point WAF as a Service only requires a few steps after purchasing in AWS Marketplace. Simply add a CNAME record to your domain’s DNS settings and point it to Check Point. This will ensure that when users type in your domain name, the DNS server will promptly search for and return the IP address of Check Point’s cloud to their respective web browsers.

Check Point on AWS

Check Point is an AWS Software Partner. Check Point’s Check Point WAF as a Service enhances and complements native AWS controls with AI-powered contextual analysis, generative and agentic AI security, automated API schema, API gateway security, and structure awareness. The solution preemptively blocks known and unknown threats including SQL injections, insecure direct object references, path traversal, cross-site scripting, XXE, command execution, and many more unauthorized access techniques. Check Point WAF as a Service can be easily deployed directly via AWS Marketplace in less than 15 minutes.

Get started with Check Point solutions on AWS

Secure your traffic immediately. Traditional WAF and application security customers run their products in report-only or alert-only modes because of the high level of false positives. Not with Check Point WAF offerings: 90% of customers run the solution in prevent mode in production environments. With continuous learning, your app will remain protected even as DevOps releases new content. Remain confident in your application threat prevention, with automated web application and API protection.

Confidently run in production

Security that keeps up with the speed of DevOps. Check Point was chosen for its automated web application and API protection to deliver leading-edge protections against both known and unknown cyberattacks. One differentiator was the ability to precisely detect and eliminate risks without the need to constantly tune false positives.

Protection against zero-day attacks

BBVA discovered that Check Point preemptively protected their systems from zero-day attacks without needing signature or rule updates, while many other organizations suffered days of business disruption. Check Point’s WAF solution also streamlined operations through a single, centralized dashboard.