Benefits

Deploy once within minutes

Available on AWS Marketplace, Check Point WAF as a Service delivers a non-agent web

application firewall deployable within minutes. Only a one-time DNS configuration is

necessary for WAF as a Service to start routing traffic securely to applications in the cloud.

Prevent DDoS and automated attacks

Check Point uses CDN delivery to guarantee continuous service and defense against Denial

of Service (DDoS) attacks and bot-driven assaults. By distributing content across various

servers, CDNs safeguard websites against malicious attacks such as DDoS, ensuring higher

traffic management and improved resilience to hardware failures.

No more agent deployments

By routing your traffic through Check Point servers, WAF as a Service will automatically be

deployed on AWS (or any public, private, or hybrid cloud environment) and will automatically

provide and renew SSL certificates.

Challenges

Traditional WAFs: too time consuming to

manage, too slow for cloud development

According to the Ponemon Institute, an average company needs

multiple full-time security administrators to manage a traditional

WAF: 45 hours per week on alerts and an additional 16 hours on rule

creation. Annual costs can exceed half a million dollars.

Traditional WAFs often fall short of today’s organizational and

security needs, which demand real-time prevention with minimal

(ideally zero) false positives. Organizations also require solutions

that deploy quickly, integrate seamlessly with AWS services, and

minimize administrative overhead, ensuring effective protection

without draining valuable resources.

Check Point WAF as a Service provides fully managed web application and API security

powered by AI/ML engines, providing maximum security with minimal administration.

Check Point WAF as a Service

A powerful fully-managed WAF for the cloud

Check Point WAF as a Service offers a complete suite of web

application, generative AI, and API protection for AWS, other public

and hybrid clouds, and modern network architectures.

With features ranging from AI-based threat detection, API discovery,

and bot prevention to file security and rate limiting, Check Point WAF

as a Service is an entirely automated offering that provides the

advantages of a high-quality web application firewall with minimal

manual input.

Contact: aws@checkpoint.com

Fully managed app, generative AI,

and API security as a cloud service

Case Study:

BBVA

Supporting an innovative web app rollout BBVA, one of the largest financial institutions in the world, required

protection for a large network of services, applications, and APIs.

Increased visibility and easy management was needed to support

wide-scale development and CI/CD automation.

Features

Beginning to use Check Point WAF as a Service

only requires a few steps after purchasing in

AWS Marketplace. Simply add a CNAME record

to your domain’s DNS settings and point it to

Check Point. This will ensure that when users

type in your domain name, the DNS server will

promptly search for and return the IP address of

Check Point’s cloud to their respective web

browsers.

Visit AWS Marketplace to

purchase or start a Free

Trial today.

Check Point

on AWS

Check Point is an AWS Software Partner. Check Point’s Check Point WAF

as a Service enhances and complements native AWS controls with AI-

powered contextual analysis, generative and agentic AI security, automated

API schema, API gateway security, and structure awareness. The solution

preemptively blocks known and unknown threats including SQL injections,

insecure direct object references, path traversal, cross-side scripting, XXE,

command execution, and many more unauthorized access techniques.

Check Point WAF as a Service can be easily deployed directly via AWS

Marketplace in less than 15 minutes.

Get started with Check Point solutions on AWS

Get started with Check Point solutions

on AWS

Secure your traffic immediately

Traditional WAF and application security

customers run their products in report-only or

alert-only modes because of the high level of

false positives. Not with Check Point WAF

offerings: 90% of customers run the solution in

prevent mode in production environments. With

continuous learning, your app will remain

protected even as DevOps releases new

content. Remain confident in your application

threat prevention, with automated web

application and API protection.

Confidently run in production

Security that keeps up with the speed of DevOps Check Point was chosen for its automated web application and API

protection to deliver leading-edge protections against both known and

unknown cyberattacks. One differentiator was the ability to precisely

detect and eliminate risks without the need to constantly tune false

positives.

Protection against zero-day attacks BBVA discovered that Check Point preemptively protected their

systems from zero-day attacks without needing signature or rule

updates, while many other organizations suffered days of business

disruption. Check Point’s WAF solution also streamlined operations

through a single, centralized dashboard.

Contact: Contact: aws@checkpoint.com

https://aws.amazon.com/marketplace/pp/prodview-jmj5xdrais4nu https://www.checkpoint.com/cloudguard/amazon-aws-security/

Page 1 Slide 1

Page 2 Slide 2