Community Help
Community guides and FAQs
Recent Content
Azure Virtual Desktop Session Host Routing
Hi, has anyone ever set up a route table on Azure so that the route to Microsoft Login subnets goes out through Cato? When we tried doing this, to make sure our AVD users are protected by Cato, users stopped being able to connect to session hosts through the AVD FQDN (broker). I suspect that its either TLS Inspection being enabled for Microsoft Login app (has never been an issue for our laptop users), or that AVD brokering system needs Microsoft Login traffic to go through the internet instead of a private route for some reason.
Clients get Cato cloud DHCP leases on the wrong subnet range vlan
Looking for a solution to our wireless clients getting DHCP leases on the wrong subnet / range / vlan. Some of our clients getting Cato cloud DHCP leases on the same subnet as the access points on trunk native VLAN. VLAN is native VLAN on truk between access points and switches.Cato Connect Recognition – Ranks
Ranks are a way for you to be able to see a Cato Connect member’s role and activity while also celebrating your own accomplishments. Ranks progress as a member becomes more active and helpful on the community and are visible throughout Cato Connect. We also use ranks to keep an eye out for the most passionate and active members so we can recognize them throughout the community and within Cato Networks. Where do the ranks appear? You can find the ranks under a member’s name on their profile: Or next to their names on posts: List of Ranks: Wondering where you are on the ladder of ranks? Here’s a list of our current ranks. Note: On September 12, 2025, we changed the rank names to be more in theme with our community and make more sense in sequence. Level Rank Name 1 Just Arrived 2 Looking Around 3 Settling In 4 Hanging Out 5 Here to Stay 6 Here for Good 7 Joining the Conversation 8 Making Connections 9 Staying Involved 10 Finding a Voice 11 Getting Noticed 12 Building Trust 13 Adding Value 14 Making an Impact 15 Role Model 16 Building a Brand 17 Community Star 18 Big Deal Around Here 19 Legend in the Making 20 Local Hero Cool right? And while the names and the ranking order are public, how you move from rank to rank will remain a mystery (it adds to the fun, trust me). You’ll get an email as you reach a new rank, and we’d love to see you back and rising through these and forcing us to create even more. Stay SASE
Azure Virtual Desktop - Always on policy
Hello! What is best practise for implementing the always on policy for Windows 11 VMs (hybrid domain joined). At the moment if a user session expires the Cato tunnel seems to break. The AVD shows as unavailable in Azure and the user is no longer able to login. Only workaround so far is using the serial console to disable the Cato network adapter or uninstall Cato altogether. Is there a way for the session to still expire while making the domain and other prerequisite AVD features still accessible? Thanks!
IPSec Tunnel Active-Active Configuration Packet Loss Issue
Hi All, We configured with IPSec Tunnel Active-Active Configuration but we are facing packet loss post Active-Active configuration on IPSec and forced to work on Active- Passive configuration which results in not using both links in the branch. We are using 2 Network links in the Branch and we have Fortinet SDWAN at Branch and IPSec tunnel is created to route all internet to Cato PoP . We are trying to leverage "Multiple Active Tunnels for IPsec Sites "Anti-Tampering Query- Auto upgrade of client version
In the EA documentation , it is written that :- As part of the Anti-Tampering protections, when Anti-Tampering is enabled, by design, the Client can't be upgraded. To enable an upgrade either manually or using an MDM, there is a specific bypass code that is not connected to disabling Anti-Tampering for the configured duration. My query is as below:- If my policy in client rollout is set as "Automatic by Cato", will the client version get updated or not. If not, then will this create issue in upgrading the version to get benefit and manual upgrade is time consumingVisual Bugs in the UI?
Anyone else struggling with visual bugs in the UI? Created Internet FW rules for our VoIP solution to cover softphones on the LAN and hard phones on designated VoIP VLANs. I also created a VLAN supernet to make rule creation easier. My conundrum is visually the LAN and VLAN20 appear as LAN in the rule. Additionally, I have a rule further downstream that blocks any other traffic on VLAN20 that doesn't match an upstream rule -- same visual bug. Anyone else experiencing this?Potential for abuse of the password reset link with https://cc2.catonetworks.com/forgotAdminPassword
Hi, This is Cato Lab from South Korea. Our customer raised a question. Is there any way to prevent malicious actors from repeatedly entering an email address to trigger password reset emails, potentially spamming or annoying administrators? Their concern is that someone could misuse the reset link mechanism to repeatedly send reset emails, causing inconvenience to the administrators or account owners. Does Cato have any existing protections or recommended best practices to mitigate this type of abuse? It will be really helpful if you guys know any type of protection behavior for administrators regarding using this webpage. Thanks, Best Regards, Cato Lab.
