Fortinet Cloud NGFW is a managed, AWS-focused cloud-native firewall service (FortiGate CNF) that provides next-generation firewall capabilities such as IPS, web filtering, and DNS security while offloading scaling and software updates to Fortinet and integrating with FortiManager for centralized policy and visibility.
Published Oct 22, 2026
Engagement-based metrics (for example, mindshare reported on some platforms) indicate interest growth for FortiGate CNF, but such metrics are proxies for engagement rather than verified market share.
| Starting Price | Example annual contract: $20,000/12 months for 1,000,000 credits (AWS Marketplace). PAYG also available. | Usage-hour and per-GB pricing published in PAN docs (e.g., base usage-hour and traffic tiers; add-ons priced separately). | PAYG (hourly tied to instance types) and contract/trial options on AWS Marketplace; many dimensions/instance-based hourly rates. |
| Best For | Organizations seeking FortiOS-aligned policy and a managed AWS firewall service; those valuing Fortinet ecosystem integration. | Organizations standardized on Palo Alto security stack or wanting PAN-managed cloud-native NGFW integrated with AWS constructs. | Enterprises familiar with Check Point management and threat prevention, deploying cloud gateways with Check Point tooling. |
| Key Strength | Managed delivery on AWS, policy ecosystem integration, and an instance option with reduced-cost trade-offs. | Detailed published pricing dimensions and AWS SaaS model integration; established NGFW efficacy in the market. | Broad feature set (DLP/IPS/App Control/VPN) and enterprise footprint in network security. |
| Key Weakness | Credit model complexity; reduced-function cost-optimized tier limits (e.g., external logging); CNF is primarily AWS-focused. | Potentially high cost at scale (traffic-heavy workloads and add-ons); licensing complexity in the PAN ecosystem. | Hourly instance-based pricing can be costly at high throughput; operational overhead if self-managing gateways versus fully managed services. |
Palo Alto Networks publishes detailed pricing dimensions for its cloud NGFW in AWS, which can assist financial modeling but may result in high total costs with heavy traffic and add-ons. Check Point CloudGuard commonly prices by underlying EC2 instance types and licensing, which is straightforward for infrastructure-oriented teams but can lead to overprovisioning costs. AWS Network Firewall often attracts AWS-first teams for native integration and operational simplicity, though its feature parity with dedicated NGFW vendors should be validated against current AWS capabilities.