> Source: [sk131434](https://support.checkpoint.com/results/sk/sk131434)

# sk131434 - Automatically Provision a Cloud Firewall Gateway in AWS

| Property | Value |
|----------|-------|
| Solution ID | sk131434 |
| Date Created | 2018-07-08 |
| Last Modified | 2026-03-29 |
| Technical Level | General |
| Products | Cloud Firewall |
| Versions | R82.10, R81.20, R82 |

## Solution

The automatic provisioning of a Cloud Firewall (formerly known ad CloudGuard) Gateway is achieved by providing the Security Management Server credentials, so that it can connect to the AWS cloud environment in which the Security Gateway is deployed, and a configuration template to apply on the Security Gateway. Then, the Cloud Firewall Gateway is tagged so that the Management Server can identify it, create a trusted connection with it, and automatically provision it.

For more information on how to deploy a Security Management Server and how to configure it to automatically provision Cloud Firewall Gateways deployed in AWS, see [sk130372](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk130372).  

Smart-1 Cloud (Check Point's Management server as a Service) is a recommended option to start using Cloud Firewall Gateways.  

Refer to [sk180501](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk180501) for step-by-step instruction for connecting Cloud Firewall Public Cloud Gateways to Smart-1-Cloud management

[Click here to deploy](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk111013#Security%20Gateway) an automatically provisioned Cloud Firewall Gateway.  

The templates automatically deploy a Cloud Firewall Gateway tagged with AWS tags according to these parameters:

|------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Parameter              | Description                                                                                                                                                                                                                                                                                          |
| Gateway Address        | Either "private", or "public". Determines if the gateway is controlled using its private or public address.                                                                                                                                                                                          |
| Management Server      | The name of the Management Server you have chosen when [setting up the automatic provisioning with the Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk130372#Setting%20up%20Automatic%20Provisioning).      |
| Configuration Template | The name of the configuration template you have chosen when [setting up the automatic provisioning with the Security Management Server](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk130372#Setting%20up%20Automatic%20Provisioning). |

<br />

<br />

<br />

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content