Two Teams. Two Priorities. One Application.
Application teams want fast, reliable application delivery without disrupting existing cloud native architectures, CI/CD pipelines, or deployment processes. They want fewer platforms to manage, predictable cloud economics, low latency, and the flexibility to scale without introducing additional operational complexity.
Security teams want enterprise-grade protection for mission-critical applications and APIs, including strong zero-day prevention, low false positives, centralized visibility, and consistent security policies without relying on basic native cloud controls or creating gaps between the CDN and the application.
Check Point WAF Enables Both Teams to Win.
Our WAF comes with a full enterprise-grade CDN with 750 POPs around the globe at no additional cost. It’s built natively on AWS and uses Amazon CloudFront to deliver applications securely and quickly, all within the WAF SaaS service. You no longer need to buy, integrate, or manage a separate CDN.
For organizations that are not currently using a CDN, Check Point WAF provides CDN performance and enterprise-grade application security together, through the same self-service WAF SaaS platform, with no CDN to configure or manage separately. You gain improved application performance and advanced protection, without the complexity of deploying an additional platform.
For organizations using an external CDN provider, Check Point WAF offers an opportunity to simplify the application-delivery architecture. Customers can reduce reliance on a non-cloud native CDN vendor, avoid serializing two CDNs and security layers, and consolidate delivery and application security through a cloud-native service.
Because Check Point WAF is deployed on AWS and uses CloudFront, application traffic can remain within the AWS cloud environment instead of being redirected through an external security vendor’s network. This helps reduce unnecessary data-transfer paths, limits potential egress costs, and avoids the additional latency and complexity that can result from routing traffic outside the cloud provider.
https://blog.checkpoint.com/wp-content/uploads/2026/11/checkpoint-waf-cdn-diagram-1.mp4
With Check Point WAF, you get:
- Enterprise application security: Protect your applications and APIs against known, unknown, and zero-day attacks with AI-powered, prevention-first security: no signatures, no manual tunning.
- Enterprise CDN included with WAF SaaS: No additional cost, contract or vendor to manage. CDN delivery is included as part of the Check Point WAF SaaS offering.
- Improved performance and scalability: Built natively on AWS, Check Point WAF uses CloudFront’s global delivery infrastructure to cache and serve content closer to users.
- Reduced egress exposure: Traffic remains within the AWS delivery architecture rather than being routed through an external CDN and WAF provider.
- Lower architectural complexity: Eliminate separate delivery and security platforms, duplicated configurations, and overlapping traffic paths.
- Preserved cloud-native workflows: Maintain existing CI/CD pipelines, deployment processes, and AWS operational practices.
- Self-service SaaS: Check Point WAF provides CDN delivery and enterprise-grade application security together with no CDN to configure or manage separately.
The result is a simpler and more efficient architecture: cloud-native application delivery for application teams, enterprise-grade protection for security teams, and fewer vendors, lower complexity, and better cloud economics for the business.
Ready to get started? Check Point WAF is available on AWS Marketplace across four listings, with both agent and as-a-service billing options and you can apply your AWS EDP funds toward any Check Point WAF offering.
