Cloud Firewall Performance for AWS | Datasheet

©2026 Check Point Software Technologies Ltd. All rights reserved | P. 1

Cloud Firewall, part of the Hybrid Mesh Security platform, provides advanced threat

prevention and automated cloud network security through a virtual security gateway, with

unified security management across all your multi-cloud and on-premises environments.

For public clouds, Cloud Firewall provides automated and elastic public cloud network security

to keep assets and data protected while staying aligned to the dynamic needs of public

cloud environments.

For private clouds, Cloud Firewall delivers dynamic security within virtual datacenters to

prevent the lateral spread of threats while consolidating visibility & management across

physical & virtual networks.

Performance: Cloud Firewall (R82) – AWS C6in Machines Notes:

• Next Generation Threat Prevention (NGTP) throughput is measured with FW, IPS, Application

Control, URL Filter, Anti-Virus, Anti-Bot features enabled (see table 2 below), using Check Point

Enterprise testing conditions.

• It is recommended to run additional testing within your environment to ensure your performance

requirements are met. Your performance may vary depending on underlying cloud vendor

infrastructure performance.

2 vCPU: C6in.Large

4 vCPU: C6in.XLarge

8 vCPU: C6in.2XLarge

16 vCPU: C6in.4XLarge

CPS 42K 80K 130K 145K

FW Only 8.3Gbps 11Gbps 13Gbps 18.5Gbps

FW + IPS 3.4Gbps 9Gbps 12.5Gbps 17.5Gbps

NGFW (FW + IPS + App Control) 2.5Gbps 5.5Gbps 11Gbps 17Gbps

NGTP (NGFW + URLf + AV + Anti-Bot) 1Gbps 2.5Gbps 4.5Gbps 8.2Gbps

HTTPS NGFW (FW + IPS + App Control) 0.6Gbps 1.4Gbps 2.8Gbps 5Gbps

HTTPS NGTP (NGFW + URLf + AV + Anti-Bot) 0.5Gbps 1.2Gbps 2.4Gbps 4.5Gbps

• Accuracy range: +/-9%

Secure Your AI Transformation

Cloud Firewall Gateway Performance for AWS

©2026 Check Point Software Technologies Ltd. All rights reserved | P. 2

Next Generation Firewall (NGFW) throughput is measured with FW, IPS, Application Control features

enabled (see table below), using Check Point Enterprise testing conditions.

Content Security Network

First Time Prevention Capabilities High Availability

• OS-level and static file analysis

• File disarm and reconstruction via Threat Extraction

• Average emulation time for unknown files that require full

sandbox evaluation is under 100 seconds

• Maximal file size for Emulation is 100 MB

• Emulation OS Support: Windows XP, 7, 8.1, 10

• Active/Active L2, Active/Passive L2 and L3*

• Session failover for routing change, device and

link failure

*Not applicable for cloud service providers usage

IPv6

• NAT66

• CoreXL, SecureXLApplications

• Use 8,000+ pre-defined or customize your own applications

• Accept, prevent, schedule, and apply traffic-shaping

Unicast and Multicast Routing (see SK98226)

• OSPFv2, BGP, RIP

• Static routes, Multicast routes

• Policy-based routing

• PIM-SM, PIM-DM, IGMP v2, and v3

Data Loss Prevention

• Classify 700+ pre-defined data types

• End user and data owner incident handling

Dynamic User-based Policy

• Integrates with Microsoft AD, LDAP, RADIUS, Cisco pxGrid,

Terminal Servers and with 3rd parties via a Web API

• Enforce consistent policy for local and remote users on

Windows, macOS, Linux, Android and Apple iOS platforms

All-inclusive Security

NGFW NGTP NGTX

Basic access control Prevent known threats Prevent known and zero-day attacks

Firewall ✓ ✓ ✓

VPN (IPsec) ✓ ✓ ✓

IPS ✓ ✓ ✓

Application Control ✓ ✓ ✓

Content Awareness ✓ ✓ ✓

URL Filtering ✓ ✓

Advanced DNS Security ✓ ✓

Anti-Bot ✓ ✓

Anti-Virus ✓ ✓

Anti-Spam ✓ ✓

SandBlast Threat Emulation ✓

SandBlast Threat Extraction ✓

Each gateway requires a license for the specific enabled security feature.

CONTACT US EMAIL: INFO@CHECKPOINT.COM WEB: WWW.CHECKPOINT.COM

Secure Your AI Transformation

mailto:info@checkpoint.com http://www.checkpoint.com/