Simplifying Cloud Network Security

When securing cloud landscapes, it’s critically important to eliminate any downtime or performance degradation that firewall or gateway implementation may cause. To address these challenges, Check Point is proud to announce our support for Google Cloud Network Security Integration. This innovation creates a nondisruptive approach to cloud firewall deployment, increasing network security without negatively impacting performance.

Scaling Hybrid Cloud Network Security

Network security and performance are critical to any organization, but this is especially true for industries under heavy regulations like financial services, healthcare, and government. So over time these organizations gain comfort, expertise, and confidence with their network security tools and vendors. Anyone who runs mission-critical applications knows they can be finicky and difficult to maintain, so changes at scale are made very carefully, and this applies especially to the security stack.

Given that backdrop, IT organizations still must make changes to adapt to increasingly sophisticated threats. Many struggle to manage network security and performance of their ever-changing complex hybrid cloud networks, especially given uncertain network demand:

• Encountering difficulties implementing consistent security policies across hundreds or thousands of hybrid cloud networks
• Keeping up with and securing the growing number of network interconnects
• Dealing with manual traffic routing to security appliances, which becomes error-prone and resource-intensive within dynamic cloud environments

Check Point and Google Cloud Network Security Integration

Google Cloud Network Security Integration addresses these challenges by seamlessly integrating third-party security solutions like Check Point CloudGuard Network Security with AI-powered threat prevention, unified logging, and granular access control. This new integration enables consistent any-to-any network security with policy enforcement across data centers, hybrid, and multi-cloud environments without requiring modifications to existing routing policies or network architectures (see Fig 1 below).

This Google Cloud integration leverages Generic Network Virtualization Encapsulation (GENEVE) tunneling technology to securely deliver traffic to CloudGuard Network Security in-band inspection gateways and firewalls while preserving original packet integrity, ensuring both security and performance. The integration delivers exactly what is needed for busy DevOps and network security teams

Fig 1: Network traffic flows: ingress, egress, north-south and east-west, go through deep packet inspection by in-band Check Point CloudGuard Network Security, which helps to keep Google Cloud assets highly secure.

Strategic Benefits for Network Security

Optimized Resource Utilization

This Google Cloud integration employs granular quintuple traffic matching through firewall rules, ensuring only relevant traffic is sent to Check Point for inspection. This precision aligns with the Check Point commitment to cloud operational efficiency, optimizing resource utilization and reducing overall security costs. It also provides our joint customers with more granular flexibility and security options.

Scalable and Secure Network Security

Check Point leverages contextual information about cloud configurations: asset tags, object names, security groups and more to automatically adjust security policies after any network changes, eliminating the need for a policy push or manual update. Check Point minimizes security management costs by utilizing native Google Cloud objects and tags to apply policies across interconnected networks. This helps Check Point customers scale and manage security efficiently across all networks no matter where they are located.

Accelerated Application Deployment

Google Cloud Network Security Integration enables infrastructure teams to offer security capabilities as a service. This approach empowers application development teams to consume CloudGuard Network Security dynamically, accelerating deployment timelines while maintaining comprehensive protection. CloudGuard Network Security is integrated with leading configuration management tools including Terraform and Ansible. This integration enables Google Cloud and Check Point customers to command and control their cloud-native security gateways programmatically while supporting infrastructure as code and accelerating their CI/CD practices.

Simplified Compliance

CloudGuard Network Security provides key capabilities that integrate seamlessly with cloud providers like Google Cloud, simplifying and lowering the cost of security compliance. Network security policies can be very granular but also defined globally and applied across all Check Point gateways and firewalls in any Google Cloud VPC (virtual private cloud), region, and zone.

And to make life even easier, all of your security policies and logs can be accessed directly from the single Check Point console no matter what public or private cloud you have deployed, it’s unified management at its best. No need to manage or maintain multiple security tools or create custom dashboards to gain full visibility of what is occurring across your networks.

The adoption of CloudGuard Network Security allows organizations to automate their security, tackle the complexities of multi-cloud environments, and securely operate in any cloud and now, it is even easier in Google Cloud.

Check Point Commitment to Cloud Security Innovation

As a trusted security partner for Google Cloud, Check Point continues to evolve our solutions to address the complex security challenges of modern cloud environments. Check Point’s support for Google Cloud Network Security Integration demonstrates our ongoing commitment to providing frictionless security that enhances rather than impedes cloud adoption and innovation.

By combining Google Cloud’s infrastructure capabilities with CloudGuard Network Security advanced threat prevention and extensive access control capabilities, organizations can confidently accelerate their digital transformation while maintaining robust and consistent security postures across their entire technology landscape.

“Our goal is to help our customers seamlessly extend advanced, multi-layered security between their enterprise networks and Google Cloud, seamlessly protecting their cloud assets and enabling secure connectivity for all their hybrid and multi-cloud networks. Check Point CloudGuard Network Security on Google Cloud enables organizations to protect their cloud environments across the globe more efficiently while also unifying all their network security under one console.” Paul Barbosa, VP Cloud Security, Check Point Software.

Getting Started

For organizations looking to secure, streamline, and accelerate their business on Google Cloud, Check Point is the clear choice. See for yourself how Check Point can enhance your network security, attend our securing Google best practices webinar or start for free on Google Cloud today.