AI has introduced a new class of network traffic.
Prompts, file uploads, model calls, and agent actions carrying sensitive business context now traverse the network as organizations race to adopt AI and achieve their business goals.
Traditional firewalls were never built to understand these connections, AI activity often looks like ordinary web traffic, leaving the firewall unable to determine whether a prompt contains sensitive data, an agent is calling a tool it should never access, or an application’s AI model is subjected to a malicious prompt.
These challenges demand comprehensive protection, which is why Check Point created the AI Defense Plane—a full-stack approach to securing AI across the enterprise. Today, we are extending that protection to the network: the connective tissue of enterprise AI and the point where users, applications, models, and agents converge.
With the introduction of the industry’s first AI Network Firewall, Check Point brings AI security for users, applications, and agents directly into the firewall organizations already own—turning the network into a real-time control point for AI security.
What the AI Network Firewall Delivers
The AI Network Firewall turns that central vantage point into real-time protection across the three ways AI is used in the enterprise:
- Secure Employee AI Use
Discover sanctioned and shadow AI tools, control access by category, risk, and intent, and inspect prompts and file uploads in real time AI-based intent classification understands the purpose of each prompt, providing more accurate data protection than traditional DLP engines that rely primarily on keywords and data patterns. - Govern AI Agents
Discover AI agents, understand how they interact with enterprise systems, and control what they can access, call, and do across applications, APIs, databases, tools, and MCP servers. - Protect AI Applications
Detect and block malicious activity targeting AI applications and LLMs in real time—including prompt injection, data exfiltration, adversarial inputs, and API abuse—directly at the network
Why the Firewall?
Because the firewall is already deployed across the enterprise, organizations can turn AI security into action today:
- Apply protection immediately. Use existing firewall infrastructure to secure employee AI use, AI applications, and agents today—without deploying another solution first.
- Stop model escape. Block prompt and MCP traffic when a model attempts to use AI tools to bypass internal controls or escape its sandbox.
- Move faster during acquisitions. Use the firewall, cloud network, or SASE to extend AI protection immediately across newly combined environments.
- Respond to frontier AI attacks. Use centralized, agentic management to accelerate policy and configuration changes across network security technologies.
- Activate a “red button.” When AI traffic must be stopped immediately, use the firewall to apply controls across the enterprise from a central point.
AI Security Wherever the Firewall Runs
AI does not live in one application, cloud, or data center. It moves across the hybrid mesh – from branches and enterprise networks to cloud environments, SASE, and AI data centers. The AI Network Firewall provides a direct enforcement point across each of these environments, securing AI activity wherever it moves.
As part of the AI Defense Plane, the AI Network Firewall brings real-time visibility, governance, data protection, and threat prevention into the network. Together with protections across endpoints, cloud, AI applications, and APIs, it creates a multi-layered approach to securing employee AI use, AI applications, and agents across the enterprise.
AI is already moving across the network. Now the firewall is built to understand it—and secure it.