Check Point WAF (formerly CloudGuard WAF) vs F5 Rules for AWS WAF comparison

Check Point WAF (formerly CloudGuard WAF) vs. F5 Rules for AWS WAF

Download the complete report

Helped 909,725 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

ROI

Sentiment score

6.2

Check Point WAF boosts cost savings, efficiency, and security, enhancing ROI through reduced ownership costs and streamlined operations.

Sentiment score

7.2

F5 Rules for AWS WAF enhanced security, reduced manual efforts, decreased malicious traffic, and improved application performance with ROI benefits.

When we are attacked, we can understand how important the solution is.

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Cyber security manager at a government with 1,001-5,000 employees

When you migrate to the cloud, it feels like saving 90% of your time.

Thanos Constantopoulos

Manager, Managed Security Services at a tech vendor with 51-200 employees

Most of the operations happen in the background, so I do not spend much time on it.

Dialungana Malungo

Principal Cybersecurity Specialist at Unitel S.A.

I observed around 35 to 45% reduction in malicious application layer traffic reaching the origin, which helped protect the backend systems and reduce risk exposure.

Technical Team Lead - Content Security at Valuepoint Systems

One measurable benefit was a reduction in manual effort required for managing and tuning web application protection policies because the managed rule capabilities and centralized visibility simplified the day-to-day operations.

For more quotes and insights, download the F5 Rules for AWS WAF report

Senior Technical Consultant at a tech consulting company with 5,001-10,000 employees

I did see a return on my investment with F5 Rules for AWS WAF because I was able to detect attacks earlier, and because of this, my resources were not scaling continuously, thus saving costs on resources.

Harsh Goenka

Cloud Architect at a outsourcing company with 51-200 employees

Customer Service

Sentiment score

6.5

Check Point WAF support is responsive and knowledgeable but occasionally delayed, needing improvement in service proficiency and availability.

Sentiment score

7.9

F5 Rules for AWS WAF have positive customer service, but users desire quicker solutions and more proactive recommendations.

They need to increase the number of people for 24/7 support.

Dialungana Malungo

Principal Cybersecurity Specialist at Unitel S.A.

They were responsive even before we committed to buying their solution.

Stilian Elenkov

Infrastructure Manager at FPMH

I also received full technical support, especially during the implementation.

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Cyber security manager at a government with 1,001-5,000 employees

They clearly explained what the best options are based on my use case, which helped us shortlist what is required.

Associate Vice President at Hitachi Systems India Private Limited

The support team generally demonstrates strong technical knowledge around application security and traffic management, along with the AWS integrations.

Senior Technical Consultant at a tech consulting company with 5,001-10,000 employees

For critical issues, the response time is quite good, and the support teams are knowledgeable in handling rule tuning, false positives, and other security-related incidents.

For more quotes and insights, download the F5 Rules for AWS WAF report

Technical Team Lead - Content Security at Valuepoint Systems

Scalability Issues

Sentiment score

7.2

Check Point WAF excels with scalable, cloud-native design, seamless AWS integration, and adaptable SaaS deployment for multi-cloud support.

Sentiment score

8.4

F5 Rules for AWS WAF provides scalable, cloud-native security, managing traffic spikes efficiently without compromising performance or requiring manual adjustments.

If I need to scale, I open a Whatsapp group with the director and the team, and we quickly proceed to do so.

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Cyber security manager at a government with 1,001-5,000 employees

They have sufficient resources, and there are no challenges from a scalability perspective.

Mantu Shaw

Project Manager at a outsourcing company with 1,001-5,000 employees

Check Point CloudGuard WAF's scalability is very good.

Ruben Ruiz

Sr. VP of Creative & Development at a non-tech company with 51-200 employees

In my experience, F5 Rules for AWS WAF handles traffic spikes and high request volumes efficiently, including during attack scenarios such as bot surges or application layer attacks.

Technical Team Lead - Content Security at Valuepoint Systems

Easily handling traffic spikes and high-volume attacks without any manual intervention.

Rohit Racharla

Cloud DevOps Engineer at a tech vendor with 10,001+ employees

It supports scaling without significantly affecting application performance even during high traffic periods or sudden spikes in requests.

For more quotes and insights, download the F5 Rules for AWS WAF report

Senior Technical Consultant at a tech consulting company with 5,001-10,000 employees

Stability Issues

Sentiment score

8.2

Check Point WAF is praised for its exceptional stability and reliability, with users rating it highly for performance and robustness.

Sentiment score

8.6

F5 Rules for AWS WAF offers reliable performance, seamless integration, and minimal intervention, outperforming native AWS rules in effectiveness and coverage.

It is very stable.

RicardoFernandes1

Team Leader, Cloudops & Cloud Architect at a consultancy with 501-1,000 employees

It is very stable, never crashing or giving me an error that I can see.

Rui Dias

Sysadmin at a government with 501-1,000 employees

I did not have any issues in the last three years during which I had more than ten critical services running on CloudGuard.

Charalampos Symeou

Information Technology - Infrastructure and Security at Cyprus Development Bank

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

F5 Rules for AWS WAF is consistently updated and applied without impacting application availability, and it handles high traffic volumes effectively, even during attack scenarios.

Technical Team Lead - Content Security at Valuepoint Systems

Especially in terms of policy enforcement, traffic inspection, and integration with AWS environments.

For more quotes and insights, download the F5 Rules for AWS WAF report

Senior Technical Consultant at a tech consulting company with 5,001-10,000 employees

Providing comprehensive managed rules coverage and reducing operational overhead compared to the AWS native managed rules.

Pranav Telang

DGM at Airtel Digital

Room For Improvement

Check Point WAF requires improvements in customization, integration, pricing, and support, with users desiring simplified setup and enhanced features.

Users want simpler tuning, AI-driven optimization, better documentation, cloud integration, reduced costs, and improved reporting for AWS WAF.

The provider could improve by providing better guidance and support during the configuration process.

Stilian Elenkov

Infrastructure Manager at FPMH

Future releases should include better bot mitigation, behavioral anomaly detection, compliance templates, advanced threat intel integration, and streamlined multi-cloud support to boost protection and usability.

Kresimir Mikolcevic

Senior Cyber Security Engineer at a computer software company with 501-1,000 employees

A machine learning-based adaptive mode could help the WAF learn over time and auto-tune policies.

reviewer2702679

Technical Support Executive at a computer software company with 501-1,000 employees

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

To stay safer from a security perspective, continuous improvisation in these security rules is required to ensure we are always up to date with new attacks.

Associate Vice President at Hitachi Systems India Private Limited

The most useful change for F5 Rules for AWS WAF would be rule-level allow listing and exception management.

IsaacHernandez

Senior Technical Lead QA at a computer software company with 501-1,000 employees

Fine-tuning it to match specific application behavior can sometimes be complex and time-consuming, especially for teams without deep WAF expertise.

For more quotes and insights, download the F5 Rules for AWS WAF report

Technical Team Lead - Content Security at Valuepoint Systems

Setup Cost

Check Point WAF is seen as costly but justified by its robust features, flexible licensing, and ease of renewal.

F5 Rules for AWS WAF offers cost-effective advanced protection and easy integration, justifying its premium over basic sets.

It is more expensive than f5, where we purchased everything as bundles, and Check Point costs more, but it is worth the money.

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Cyber security manager at a government with 1,001-5,000 employees

It is less costly than Cloudflare, Fortinet, and other vendors.

Mantu Shaw

Project Manager at a outsourcing company with 1,001-5,000 employees

I know that its price is relatively expensive compared to other products but it gives benefits that are worth it.

Baruch Peretz

Ciso at a government with 1,001-5,000 employees

It has competitive pricing.

Associate Vice President at Hitachi Systems India Private Limited

There is no significant setup cost involved, as it is a managed service that can be quickly integrated into the existing AWS WAF configuration without additional infrastructure.

For more quotes and insights, download the F5 Rules for AWS WAF report

Technical Team Lead - Content Security at Valuepoint Systems

F5 Rules for AWS WAF is not very costly and is reasonable, with enterprises being able to afford the cost.

Rohit Racharla

Cloud DevOps Engineer at a tech vendor with 10,001+ employees

Valuable Features

Check Point WAF offers AI-driven protection with easy deployment, low false positives, scalability, and integration with Azure, enhancing security.

F5 Rules for AWS WAF offers advanced threat mitigation, customizable security, and seamless AWS integration for enhanced protection and efficiency.

Upon implementation and evaluation with third-party penetration testing, it meets rigorous security standards required for dealing with financial institutions.

Stilian Elenkov

Infrastructure Manager at FPMH

It can protect against zero-day attacks and hidden anomalies.

Domenico Cacciari

Amministratore Della Sicurezza Di Rete at a government with 1,001-5,000 employees

The solution preemptively blocks zero-day attacks and detects hidden anomalies effectively.

Charalampos Symeou

Information Technology - Infrastructure and Security at Cyprus Development Bank

For more quotes and insights, download the Check Point WAF (formerly CloudGuard WAF) report

Now, looking at these rule sets, they ensure that our origin or our application content and code, as well as the application itself or its API, are secure enough, always.

Associate Vice President at Hitachi Systems India Private Limited

F5 Rules for AWS WAF rule sets are highly effective in detecting and mitigating OWASP Top 10 attacks such as SQL injection, XSS, and command injection, which significantly strengthens application security.

For more quotes and insights, download the F5 Rules for AWS WAF report

Technical Team Lead - Content Security at Valuepoint Systems

Using F5 Rules for AWS WAF has positively impacted my organization by making our AI-integrated application more secure from bot attacks, restricted size bodies, automated rate blocking for DDoS, and managed rules, especially as security has become a common concern across the industry.

Rohit Racharla

Cloud DevOps Engineer at a tech vendor with 10,001+ employees

Categories and Ranking

Check Point WAF (formerly C...

Ranking in Web Application Firewall (WAF)

5th

Average Rating

8.6

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Application Security Tools (5th), Data Loss Prevention (DLP) (8th), DevSecOps (2nd)

F5 Rules for AWS WAF

Ranking in Web Application Firewall (WAF)

14th

Average Rating

8.4

Reviews Sentiment

7.8

Number of Reviews

Ranking in other categories

Business Rules Management (3rd)

Mindshare comparison

As of August 2026, in the Web Application Firewall (WAF) category, the mindshare of Check Point WAF (formerly CloudGuard WAF) is 2.0%, up from 1.5% compared to the previous year. The mindshare of F5 Rules for AWS WAF is 0.4%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Web Application Firewall (WAF) Mindshare Distribution
Product	Mindshare (%)
Check Point WAF (formerly CloudGuard WAF)	2.0%
F5 Rules for AWS WAF	0.4%
Other	97.6%

Web Application Firewall (WAF)

Featured Reviews

Krishnakumar Mahadevan

CISO at Spink Solutions Private Limited

Cloud security has strengthened risk posture and improved advanced threat visibility

There are some API gateway and API securities I mentioned. If these are incorporated with AI-related features, particularly those seven key vulnerabilities I mentioned—token theft and tool poisoning—that would be beneficial. AI-related features are not included yet in Check Point CloudGuard WAF. However, they are present in FortiGate. That is the advantage of FortiGate now. FortiGate is stopping all AI-related vulnerabilities now. FortiGate has this capability. It is unfortunate that even Palo Alto also lacks one or two of these features. Check Point Quantum is very good, without a doubt. However, their capabilities are not in comparison with Palo Alto. There are some features, but there are some gaps in comparison with Palo Alto.

Read full review

Advanced protection has reduced web attacks and improves application performance and operations

Technical Team Lead - Content Security at Valuepoint Systems

One area where F5 Rules for AWS WAF can be improved is in simplifying the tuning process. While F5 Rules for AWS WAF is powerful, fine-tuning it to match specific application behavior can sometimes be complex and time-consuming, especially for teams without deep WAF expertise. Another improvement could be enhanced visibility and reporting. Although AWS WAF provides logs, having more intuitive and built-in dashboards or clearer categorization of rule triggers would make it easier to quickly identify and analyze attack patterns. Additionally, expanding the capabilities around bot management and behavior analysis would be beneficial compared to some dedicated bot management solutions. More advanced detection techniques could further strengthen the protection against sophisticated automated traffic. Finally, providing more predefined templates or best practice recommendations for different application types would help speed up the deployment and reduce the initial configuration effort.

Read full review

See which vendors are best for you

Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.

See recommendations

909,725 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

18%

Outsourcing Company

13%

Financial Services Firm

Construction Company

33%

Comms Service Provider

16%

Computer Software Company

Energy/Utilities Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	54
Midsize Enterprise	23
Large Enterprise	34

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	1
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for CloudGuard for Application Security?

It is a little bit expensive, but the pricing model is acceptable, though a reduction would make it more competitive with leaders such as Palo Alto.

What needs improvement with CloudGuard for Application Security?

The false positive rate is a concern, but I could recommend improvements where false positives have to be minimized better. This all depends on how the rules are customized and configured, and it c...

What is your primary use case for CloudGuard for Application Security?

The main purpose is to have network security through machine learning, which can offer threat detection and intelligence for my endpoints, and I am looking for application security. I am looking fo...

What is your experience regarding pricing and costs for F5 Rules for AWS WAF?

My experience with the pricing, setup cost, and licensing for F5 Rules for AWS WAF was good with purchasing and the setup cost.

What needs improvement with F5 Rules for AWS WAF?

The additional costs for F5 Rules for AWS WAF are quite high, as F5 managed rules require a separate subscription on top of the standard AWS WAF charges; it would be great if it would be pre-integr...

What is your primary use case for F5 Rules for AWS WAF?

F5 Rules for AWS WAF manages the security rule set by applying the rules and setting the block directly in AWS WAF to provide advanced protection against web application attacks, bots, threats, and...

OpenText Dynamic Application Security Testing vs Check Point WAF (formerly CloudGuard WAF)

Comparisons

Compared 7% of the time

Palo Alto Networks Enterprise Data Loss Prevention vs Check Point WAF (formerly CloudGuard WAF)

Compared 7% of the time

AWS WAF vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

Cloudflare Web Application Firewall vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Check Point WAF (formerly CloudGuard WAF)

Compared 6% of the time

More Check Point WAF (formerly CloudGuard WAF) Competitors

No data available

Product Reports

Check Point WAF (formerly CloudGuard WAF)

Download Check Point WAF (formerly CloudGuard WAF) product report

Check Point WAF (formerly CloudGuard WAF) report

F5 Rules for AWS WAF

Download F5 Rules for AWS WAF product report

Also Known As

Check Point CloudGuard Application Security, CloudGuard Application Security, CloudGuard AppSec, Check Point CloudGuard Code Security

No data available

Overview

Check Point WAF offers a robust security framework with AI-driven threat detection and seamless integration, protecting applications and APIs in multi-cloud environments.

Effective in preemptively blocking threats through AI and machine learning, Check Point WAF reduces false positives and operational workload. Its integration capabilities and threat intelligence provide comprehensive protection against zero-day attacks, while centralized management facilitates cost-effective and insightful threat reporting.

What are the main features of Check Point WAF?

AI and Machine Learning: Preemptively blocks threats without signature reliance.
Centralized Management: Simplifies oversight and reduces costs.
Threat Intelligence: Enhances security posture against zero-day attacks.
Ease of Deployment: Quick setup with user-friendly interface.
Comprehensive Protection: Guards against SQL injection and DDoS attacks.

What benefits should be considered by users?

Reduced False Positives: Minimizes operational interruptions.
Cost-effectiveness: Reduces management overhead.
Insightful Reporting: Enables swift response to threats.
Seamless Integration: Enhances security processes with existing tools.

Check Point WAF is employed in industries securing web applications and APIs, especially in multi-cloud environments. It effectively protects backend services, prevents unauthorized access, and monitors traffic, making it suitable for businesses with diverse infrastructures. It ensures compliance with security standards and adapts to fluctuating traffic patterns.

Check Point Software Technologies

F5 Rules for AWS WAF provides advanced web application protection tailored to secure applications hosted on AWS, offering dynamic defenses against evolving threats.

This solution offers a robust set of rules designed to enhance AWS WAF capabilities, delivering specialized protections against complex web threats. F5 Rules dynamically guard against emerging vulnerabilities, ensuring comprehensive threat mitigation. It's crafted to integrate seamlessly with AWS environments, making it fast and easy to deploy, manage, and scale as compared with legacy alternatives, providing users a manageable and comprehensive security layer for their applications.

What are the key features of F5 Rules for AWS WAF?

Automatic Updates: Regularly refreshes its defenses to address the latest threats.
Pre-built Rules: Offers a library of pre-configured rules that are easy to deploy.
Scalable Configuration: Adapts seamlessly to changing web traffic conditions.

What ROI should users expect from F5 Rules for AWS WAF?

Improved Security Posture: Reduces risk exposure with specialized threat intelligence.
Cost Efficiency: Lowers operational costs by reducing the need for manual threat management.
Time Savings: Streamlines deployment and maintenance with quick setup and automated updates.

In industries such as finance, healthcare, and retail, F5 Rules have been implemented to protect sensitive data and online transactions. This helps ensure compliance with industry regulations while maintaining performance and uptime for web applications.

Sample Customers

Orange España, Paschoalotto

Information Not Available

Check Point WAF (formerly CloudGuard WAF) vs. F5 Rules for AWS WAF