Cloud Firewall Test Results

CyberRatings.org tested nine cloud firewalls this week.

Recommended Firewalls

Fortinet FortiGate, HPE Juniper vSRX, Palo Alto VM-Series, and Versa Networks scored 99.7%+ security.

Hyperscaler Weaknesses

AWS and Azure firewalls scored 0% security effectiveness, Google Cloud at 77.45%.

CyberRatings CEO

Vikram Phatak says security tools need significant investment to improve.

“I don't think it is. There are good choices out there. The know-how to build strong security products exists; it comes down to how much a vendor is willing to invest.”

Google's Improvement

Google improved security from 0.00% to 77.45% since April 2025.

“Google is a good example. Compare its past results with its current ones and you can see those investments paying off.”

Cost Factor

Check Point CloudGuard scored highest at 99.95% but got neutral rating due to high cost.

“Check Point CloudGuard Network Security posted the highest Security Effectiveness of any product tested, at 99.95%, but it received only a Neutral rating because of its high cost”

Evasion Techniques

Tests ran 5,004 attacks across 43 evasion techniques spanning OSI Layers 3-7.

TLS Importance

Most enterprise traffic is encrypted; firewalls must inspect TLS to detect threats.

“The majority of enterprise traffic is now encrypted, so if a firewall can't inspect TLS, it can be blind to many of the largest threats.”

Hyperscaler Tradeoff

Hyperscalers offer easy deployment but lack full security protection.

“Hyperscalers have built convenient, integrated security tools, but convenience is not the same as best-in-class protection”

AI Workloads

Firewalls need to scale for AI agent traffic growth and complex policies.

“As enterprises deploy local AI models and agent-based workflows, east-west traffic between agents will grow, policies will become more complex”

Versa Networks

Versa Networks remains independent with strong security tools for cloud and on-premises.

“Versa, founded by Juniper veterans, is a long-time member of the Futuriom 50. It is one of the few SD-WAN and SASE companies that remained independent by declining M&A”

Next Steps

Users should seek third-party security vendors for better protection.

“Users shouldn't rely on cloud tools to secure their networks and will continue to need third-party security vendors”