By default, internet traffic from our China locations seems to egress via the local China PoPs. However, we would like to force the egress through a non-China PoP instead. Is there a recommended configuration or best practice within Cato to achieve this? Or is this not possible due the Agreement with China?
Yes, explicitly egressing certain international traffic via PoPs outside Mainland China using network rules is definitely possible and what most would do. Just don't reroute to Google, Facebook etc...
https://support.catonetworks.com/hc/en-us/articles/20381963015581-Understanding-Cato-Networking-in-China
So i am allowed to force the microsoft traffic through an another country-pop?
I am not your legal counsel, but if the traffic in question is not blocked by The Great Firewall it is fairly safe to assume that you are allowed to egress it via a PoP abroad for performance reasons. You should also consult Microsoft's documentation on the topic: https://learn.microsoft.com/en-us/microsoft-365/enterprise/microsoft-365-networking-china
