Discuss, share, and learn with Cato Networks users. Exchange insights, solve challenges, and get more from your SASE journey.
Cato and SASE discussions and best practices.
API questions-and-answers, discussions, and best practices.
Comment, discuss, and provide feedback on KB articles
Since around June 2026, due to a Microsoft specification change, an issue has occurred where Conditional Access policies configured to exclude CatoPortal are no longer enforced as intended. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-enforcement-resource-exclusions We understand that this…
Hi, I'm trying to configure Pre Login with Device Certs but getting a "Missing device certificate" in the events. I've double checked everything twice, but no luck. I'm using Microsoft Cloud PKI (Intune). Can someone help? Should I open a ticket with cato? Thanks :)
We updated the Using the App Catalog article to clarify that the Activities for an app can be implemented in either the Application Control, Data Control, or File Control rules
I am reviewing the KB articles regarding User Awareness (AD Query) using an AD server. The purpose is to identify the IP addresses for which communication must be allowed in order for User Awareness (AD Query) to work successfully. The following KB article explicitly states that 10.254.254.12 is a required IP address: For…
Links in this article do not work. Please provide link/info how the cato scripts for vsocket deployment can be downloaded https://knowledge.catonetworks.com/docs/copying-the-azure-vsocket-vhd-image-with-sas#h_01jxj2npn86ghf5zhfcdwx7eqz
Hi Community, I'm currently testing Seamless SSO with Cato and ran into an issue that I’d appreciate some input on. When using an external browser for authentication, Conditional Access (CA) policies work as expected, and compliant devices are recognized. However, when trying to authenticate via the embedded browser, the…
Our always-on policy allows users to disable for up to 15 minutes, before it is auto-reenabled. We have some users who need to be able to turn off always-on for a full day but only on a specific network. We can use 'managed networks' or indeed 'IP ranges' to specify when the network is detected, but the always-on policy is…
We published a new article explaining the EOS policy for Socket versions - Cato Socket Software End-of-Support Policy Let us know if you have comments or feedback!
I am working on several SASE proposals and need clarity on how to accurately size the Cato Cloud Bandwidth license pool based on a customer's specific application hosting environment. Could you please provide the recommended methodology or sizing formulas for the following scenarios: Cloud Hosted Applications (Azure, GCP,…
For the article IP Allocation Policy for Remote Users, we received the following comment: Please document that changing IP ranges under IP Allocation Policy > Settings can reconnect currently connected Clients Excellent point - the article is updated to include this information.
If you run into any issues, feel free to contact the team at community@catonetworks.com .
It looks like you're new here. Sign in or register to get started.
Join us for the second webinar in our series to explore how to secure the AI agents you build and deploy; from custom agents to managed solutions. In this session we will: Introduce Cato’s framework for Agent Security explore AgentSense’s unique approach to stopping AI threats Show it in action with a live demo of securing…
