Reporting on Max amount of licenses reached
It's rather embarrassing to run out of SDP licenses as it provides for a negative new joiner experience when their Cato connection won't come up as expected.
As Cato in their wisdom has decided there is no need to alert admins when the license count is reached (they'd probably rather we waste money purchasing a sufficient surplus of said licenses), is there a way to use the API to query for this status?
Yes, I submitted an RMA for this last year that went nowhere. And yes, I know we can probably hack something together on our end that statically compares the number of licenses to the membership count in our provisioning groups. But this feels like it should be a basic feature of a SaaS service, especially as there is a hard stop when the license count is reached.
Thanks for raising this. You're absolutely right that running into a hard stop on ZTNA licenses creates a poor experience for new joiners, and we take this seriously.
We do have an API endpoint that can help you monitor license consumption:
ZtnaUsersLicenseAllocations in the CMA API. This can be used to query current usage and allocation status, and could serve as the foundation for proactive monitoring on your end.That said, you're also right that this kind of visibility and alerting shouldn't require DIY solutions. We're actively exploring improvements to the license management experience, including smarter allocation models and built-in alerts when you're nearing license limits — both to prevent surprises and to give admins more confidence in planning.
Appreciate you resurfacing this and giving us a chance to do better.
