Forum Discussion

lo's avatar
lo
Comet
9 days ago

Clarification on Bandwidth Limit with Split Tunnel Policy

Hi CATO Community,

I have a question regarding the CATO Bandwidth limit in relation to split tunneling policies.

I have purchased a 25 Mbps CATO Bandwidth plan. If an SDP Client connects to the CATO Cloud and I configure a split tunnel policy to route some traffic outside of CATO Cloud (e.g., directly to the internet), will this traffic still be limited to the 25 Mbps bandwidth cap?

 

2, If the traffic is indeed limited, is there any method to bypass this limit for split tunnel traffic? Specifically, I want the split tunnel traffic to bypass the CATO Cloud entirely, avoid any security checks, and enjoy the full speed of our original internet connection.

I would appreciate any insights or advice from those who have experience with this configuration.

Thanks in advance for your help!

network
  • bizzle90's avatar
    bizzle90
    Icon for Cato Employee rankCato Employee
    9 days ago

    Hey Io,

    So with the SDP client it does operate a little differently with regards to BW throughput, we in fact don't cap the SDP client (in most parts of the world anyway). 

    Please review the KB here:

    https://support.catonetworks.com/hc/en-us/articles/360001054077-Supported-Throughput-for-Cato-SDP-Clients

    I've added our KB here further explaining the license types:

    https://support.catonetworks.com/hc/en-us/articles/4413265665297-Working-with-Cato-License-Types

    Regarding your second point, when using a VPN client (not just Catos), you're likely going to see reduced throughput, because of factors like adding tunnel overhead to secure your traffic for example. 

    That said, if you see clients experiencing detrimental throughput when using the client, I would suggest raising a support ticket, so we can assist in figuring the problem out.

    Ideally, we want your SDP users to benefit from our security services, so unless there is a specific use case to bypass the Cato Cloud. We want you to enjoy the SASE solution to it's fullest.

     

    Thanks