Checkpoint vSEC for Amazon Web Services
Extends advanced threat prevention security to protect customer data and services in Amazon's cloud

Check Point vSEC for Amazon Web Services (AWS) extends advanced threat prevention security to protect customer data and services in Amazon's cloud while enabling secure connectivity across your cloud and on-premises environments. As an AWS Security Competency partner, vSEC compliments cloud security controls to enable you to easily and seamlessly secure your assets in the cloud with elastic scalability and high availability by integrating with AWS infrastructure services.

Comprehensive threat prevention for your Amazon cloud

• Safeguard data and assets in AWS public cloud
• Securely connect enterprise and mobile users
• Advanced protection against sophisticated malware and zero-day attacks
• Auto-scaling security and high availability

Easily extend security to your Amazon cloud

• Available in the AWS Marketplace with hourly on-demand (PAYG) and Bring Your Own License (BYOL) options
• Rapid, one-click deployment
• Tailor security protections to your specific business needs

Unified management of public cloud and hybrid environments

• Single pane-of-glass management
• Consistent policy and threat visibility across public and private cloud infrastructures
• Security management, logging and reporting leveraging AWS defined objects
• Simplify compliance reporting for on-premise and cloud assets

Features

Check Point vSEC for AWS delivers comprehensive security protections to safeguard your cloud applications and data including:

• Firewall, IPS, Antivirus and Anti-Bot protect services in the public cloud from unauthorised access and attacks.
• Application Control prevents application layer denial of service attacks and protects your cloud services.
• IPsec VPN provides secure communication into cloud resources.
• Mobile Access allows mobile users to connect to the cloud using an SSL encrypted connection with two factor authentication and device pairing.
• Data Loss Prevention protects sensitive data from theft or unintentional loss.
• SandBlast Zero-Day Protection provides the most comprehensive protection against malware and zero-day attacks.

Check Point vSEC for AWS is easily deployed by clicking on the AWS Marketplace link and then enabling relevant Software Blade protections in the Amazon cloud for securing your public cloud assets.

Check Point vSEC for AWS is managed using your existing on-premise Check Point Unified Security Management Solutions. A consistent security policy is enforced for corporate assets across both your Amazon cloud and on-premise infrastructures from a single console.

Check Point vSEC supports dynamic security policies that leverage AWS defined-objects to automatically adjust security to changes in a dynamic cloud environment.

Check Point vSEC for AWS consolidates threat visibility and enforcement across your cloud and on-premise infrastructures. vSEC for AWS improves visibility, logging, forensics and reporting by leveraging AWS-defined objects. Unified logs and reporting simplify compliance and audits.

Check Point vSEC for Amazon Web Services can be quickly deployed and provisioned using the AWS CloudFormation template.

Simply go to the AWS CloudFormation web console, provide this URL template and you are ready to go.

Check Point vSEC can be deployed for business-critical use cases that demand high availability by leveraging support for multiple Availability Zones and integration with AWS Elastic Load Balancers and CloudWatch. The powerful auto-scaling capability allows security to grow elastically with the changing capacity requirements of a dynamic business environment.

Specifications

Performance

Pricing Notes:

• All Prices are Inclusive of GST
• Pricing and product availability subject to change without notice.
• vSEC VE Gateway is licensed by the number of virtual cores (vcores) assigned to the virtual machine running it
• This license supports vSEC VE Gateways running on VMware's ESX/ESXi/vCloud Air, Microsoft Azure/Hyper-V, Amazon's AWS and KVM
• Check Point vSEC VE Gateway license is pool based :
  • You can add additional licenses to the pool
  • The license pool is deployed on Check Point management server and will be automatically assigned to vSEC VE gateways
• Renewal:
  • The license is composed of a perpetual software license and services renewal license
  • The renewal subscription license should match the number of cores in the perpetual license
• Software Blades :
  • Regardless of the numbers of vcores allocated, every VE Gateway provides - local management license for up to 2 gateways - 5 mobile access users - Customer can purchase addition software blades and deploy them on specific vSEC VE Gateways
  • For NGTX license: NGTX cloud inspection quota is 10k files/vcore/month