CloudGuard Controller is a built-in component on a Check Point Security Management Server that manages security for Check Point Security Gateways that are deployed in Public Clouds and Private Clouds (on-premises).

The CloudGuard Controller dynamically learns about objects and attributes in data centers, such as changes in subnets, security groups, virtual machines, IP addresses, and tags.

After using the vendor's API to establish a trust relationship with a data center, CloudGuard Controller regularly polls the connected environments for changes in objects and object attributes used in the Security Policy.