The most recent content from our members.
Cato account licenses use one of two models Bursting Model (starting in January 2027) Enforcement Model See our one-page guide for the differences between the two and how to identify which one your account uses.
In our latest Cato Connect webinar, the API & DevOps team explored how to secure AI agents; starting with local agents that can access tools, MCP servers, skills, and sensitive data on a user’s device. We covered key risks like indirect prompt injection, unverified tools, excessive permissions, and data exposure, along…
We've released a step-by-step guide to automating API-based responses to security events and XOps stories. Learn how to extract story data, apply remediation actions such as isolating hosts, blocking IOCs, and quarantining users, and annotate the story with actions taken. View the guide here: Remediating XOps Stories and…
We received feedback asking us to update our KB article about the CMA's Configuration Wizard. Some of the buttons and screens for handling posture recommendations had been changed, and the KB article hadn't kept up. We've now published an updated version of this page that accurately reflects the CMA. Keep sending us your…
For the article, Understanding Event Fields, we received the comment: This does not detail out all the Sub-Types available in CMA today This is a known gap, we are working on a new dynamic HTML page that will easily show all event sub-types. Stay tuned!
We greatly enhanced Allowlisting Processes and URLs for the Cato Client and separated the URLs by CMA region. Now you can easily see which URLs are relevant to your account based on the CMA region that your account uses. Note: The CMA region does not determine which Cato Cloud PoPs the Client can connect to. By default,…
We added a new article to help you understand deploying app connectors for Private Access: App Connector Reference Architecture Let us know what you think!
Hello Cato Community, The CMA supports URL lists under Resources → Categories → Custom Categories, but I could not find public GraphQL APIs to list, create, update or delete them. The API appears to support only referencing an existing Custom Category by ID or name. Custom Applications already have CRUD API support. Is…
Short, focused demo sessions, giving a practical look at Cato capabilities in action. Each 20-minute session focuses on a real use case and includes an overview, product walkthrough, and Q&A. Our upcoming session on September 15 - AI Without the Risk: Put Guardrails Around Employee AI Use Will focus on practical ways to…
We had been under the impression that by enabling a Geoblock rule in the Client Connectivity Policy for Hong Kong, that would prevent any of our travelling users from connecting to a Hong Kong PoP. I have been informed by Cato support that this is not the case. "Regarding Hong Kong specifically, Hong Kong is not a Chinese…
It looks like you're new here. Sign in or register to get started.