nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Cato Cloud
- Discussions
- Best Practices
API
- Discussions
- Best Practices
Idea Hub
Community Help
- Discussions
Cato Partners
Cato SWIFTs
Discussions
Categories
Groups
Help

How can I route internet-bound traffic from our China-based sites to exit outside of China?

GiuDNica

By default, internet traffic from our China locations seems to egress via the local China PoPs. However, we would like to force the egress through a non-China PoP instead. Is there a recommended configuration or best practice within Cato to achieve this? Or is this not possible due the Agreement with China?

Find more posts tagged with

Accepted answers

I am not your legal counsel, but if the traffic in question is not blocked by The Great Firewall it is fairly safe to assume that you are allowed to egress it via a PoP abroad for performance reasons. You should also consult Microsoft's documentation on the topic: https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-networking-china

All comments

Yes, explicitly egressing certain international traffic via PoPs outside Mainland China using network rules is definitely possible and what most would do. Just don't reroute to Google, Facebook etc...

https://support.catonetworks.com/hc/en-us/articles/20381963015581-Understanding-Cato-Networking-in-China

GiuDNica

So i am allowed to force the microsoft traffic through an another country-pop?