Discuss, share, and learn with Cato Networks users. Exchange insights, solve challenges, and get more from your SASE journey.
Cato and SASE discussions and best practices.
API questions-and-answers, discussions, and best practices.
Comment, discuss, and provide feedback on KB articles
Hi Community, I'm currently testing Seamless SSO with Cato and ran into an issue that I’d appreciate some input on. When using an external browser for authentication, Conditional Access (CA) policies work as expected, and compliant devices are recognized. However, when trying to authenticate via the embedded browser, the…
Our always-on policy allows users to disable for up to 15 minutes, before it is auto-reenabled. We have some users who need to be able to turn off always-on for a full day but only on a specific network. We can use 'managed networks' or indeed 'IP ranges' to specify when the network is detected, but the always-on policy is…
Links in this article do not work. Please provide link/info how the cato scripts for vsocket deployment can be downloaded https://knowledge.catonetworks.com/docs/copying-the-azure-vsocket-vhd-image-with-sas#h_01jxj2npn86ghf5zhfcdwx7eqz
I am reviewing the KB articles regarding User Awareness (AD Query) using an AD server. The purpose is to identify the IP addresses for which communication must be allowed in order for User Awareness (AD Query) to work successfully. The following KB article explicitly states that 10.254.254.12 is a required IP address: For…
We published a new article explaining the EOS policy for Socket versions - Cato Socket Software End-of-Support Policy Let us know if you have comments or feedback!
I am working on several SASE proposals and need clarity on how to accurately size the Cato Cloud Bandwidth license pool based on a customer's specific application hosting environment. Could you please provide the recommended methodology or sizing formulas for the following scenarios: Cloud Hosted Applications (Azure, GCP,…
Since around June 2026, due to a Microsoft specification change, an issue has occurred where Conditional Access policies configured to exclude CatoPortal are no longer enforced as intended. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-enforcement-resource-exclusions We understand that this…
For the article IP Allocation Policy for Remote Users, we received the following comment: Please document that changing IP ranges under IP Allocation Policy > Settings can reconnect currently connected Clients Excellent point - the article is updated to include this information.
Searching in new KB for roadmap reveals no roadmap, but lots of product updates that are in the KB that link to the roadmap document. All the links are either bit.ly (which gives the user an error) or the old KB (which gives the user an error). Could it be addressed that the roadmap is reinstated, and I would highly…
The current link to the X1600LTE firmware is for a v25 version, but we have now moved to v27, also the hash file included at the base of the upgrade procedure article links to a v23 version hash file.
If you run into any issues, feel free to contact the team at community@catonetworks.com .
It looks like you're new here. Sign in or register to get started.