Discuss, share, and learn with Cato Networks users. Exchange insights, solve challenges, and get more from your SASE journey.
Cato and SASE discussions and best practices.
API questions-and-answers, discussions, and best practices.
Comment, discuss, and provide feedback on KB articles
Hi, We have some CMA users who do not need access to "AI Security" menu, so I disabled all AI Security permissions in their role settings. However, I noticed that the AI Security menu remains visible even when all AI Security permissions are disabled. For other CMA menus, their visibility changes according to the…
Hi everyone, I'm Chris, and I work with Cato every day. Over the last few months I've built CST Pulse, a free app for keeping an eye on Cato tenants from an iPhone, iPad or Apple TV. It's built entirely on the Cato GraphQL API, so it may also be a useful example of what the API can do. I'd love for some of you to try it…
For the article Using the Cato Mobile CMA App, we received the following comment: Hello, i cant find the App in the Apple App Store in Germany. When will you publish the App? In general, Cato features are gradually rolled out over two weeks. The Cato Mobile app should be available in regional App Stores over the next week…
Summary of Cato Windows Client Releases I am receiving version updates for rollout pilot users before the release notes or even announcement of new version are getting added to this page! Also related: the client download page only lets users download a single file called setup.exe which gives no indication or context of…
Hi, I'm trying to configure Pre Login with Device Certs but getting a "Missing device certificate" in the events. I've double checked everything twice, but no luck. I'm using Microsoft Cloud PKI (Intune). Can someone help? Should I open a ticket with cato? Thanks :)
I am working on several SASE proposals and need clarity on how to accurately size the Cato Cloud Bandwidth license pool based on a customer's specific application hosting environment. Could you please provide the recommended methodology or sizing formulas for the following scenarios: Cloud Hosted Applications (Azure, GCP,…
Our always-on policy allows users to disable for up to 15 minutes, before it is auto-reenabled. We have some users who need to be able to turn off always-on for a full day but only on a specific network. We can use 'managed networks' or indeed 'IP ranges' to specify when the network is detected, but the always-on policy is…
Since around June 2026, due to a Microsoft specification change, an issue has occurred where Conditional Access policies configured to exclude CatoPortal are no longer enforced as intended. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-enforcement-resource-exclusions We understand that this…
We updated the Using the App Catalog article to clarify that the Activities for an app can be implemented in either the Application Control, Data Control, or File Control rules
I am reviewing the KB articles regarding User Awareness (AD Query) using an AD server. The purpose is to identify the IP addresses for which communication must be allowed in order for User Awareness (AD Query) to work successfully. The following KB article explicitly states that 10.254.254.12 is a required IP address: For…
If you run into any issues, feel free to contact the team at community@catonetworks.com .
It looks like you're new here. Sign in or register to get started.
