Community Manager

5 hours ago

Recording: Ask Me Anything with Professional Services - February 2026

Professional Services AMA – February 2026

Missed the live session? Here’s the full rundown of every question asked, summarized for quick reading, and the recording for deeper context and chit chat.

Our experts this session:
Robin Johns, David Tudor, and Mihai Radoveanu

AI Security Questions

How will Cato help identify MCPs, AI agents, and all the new AI tools popping up daily?

Cato is introducing an AI Security module (GA expected early Q2) that will provide:

Local AI usage discovery (MCP servers, local agents)
Cloud AI usage discovery (ChatGPT, Copilot, etc.)
Model inventories & device discovery for homegrown AI
Early access may be available around mid‑March.

Will users be able to test early versions?

Yes. Cato expects to offer trial availability around general release (early Q2).

Can customers see how each AI app uses data (free vs enterprise)?

Yes. Cato can differentiate free, paid, and enterprise versions of tools like ChatGPT or Copilot by analyzing traffic, authentication headers, or API connections.

Can existing AI-related firewall and CASB rules be removed once AI Security is enabled?

Technically yes, but Cato recommends keeping them during transition. Move them to “monitor” mode first before deleting.

Can Cato block or warn users about risky AI sites?

Yes. Through web firewalling and AI Security policies, admins can:

Block sites
Redirect users
Show user education prompts
Apply rules per site, category, or group

Can Cato enforce guardrails on AI prompts?

Yes. Prompt policies can:

Detect PII
Block sensitive data
Anonymize inputs
Detect intent (e.g., self‑harm, illegal activity, jailbreak attempts)
Trigger “Are you sure?” notifications

Does this work with embedded Copilot inside Microsoft apps (Teams, Word, Excel, etc.)?

Yes. Cato can audit and monitor AI usage across the Microsoft ecosystem, including embedded Copilot prompts.

Can Cato block file uploads or screenshots to AI tools?

Partially.

Today: Cato can block the upload action.
Later in 2026: OCR‑based inspection of files/images is on the roadmap.
DLP is still recommended for full file handling.

Can Cato monitor email-based prompt injection attacks?

Yes. AI Security can detect prompt-injection attempts, including those originating from email content.

Can it help discover vulnerable code or libraries in homegrown AI apps?

Yes. Cato can inspect your AI pipelines, models, datasets, knowledge bases, and detect:

PII in training data
Vulnerable base models
Insecure tools/endpoints
Risky GPTs or agent configurations

Will AI Security support SOAR-like capabilities?

Eventually. Partners already offer SOAR-like services today. Cato may expand here in the future.

Can Cato detect internal MCP servers (e.g., engineers running local Docker containers)?

Yes. Cato can detect MCP traffic using Layer 7 signatures and app analysis.

Will the browser plugin be locked so users can’t remove it?

Yes, deployment via MDM allows admins to make the plugin non-removable.

Does the ZTNA client need to be connected for AI/user identification?

No.
As long as the client is installed and running, Cato can identify the user.

Identity & SCIM / LDAP Migration Questions

Can customers migrate from LDAP to SCIM gradually?

Yes, you can run LDAP and SCIM in parallel. SCIM entries override LDAP where both exist.

Do SCIM provisioning and SSO use the same application in Entra?

No.

SSO app = authentication
SCIM provisioning app = user & group sync

Both coexist.

Can two SCIM provisioning apps run at the same time?

No.
If you rebuild the SCIM app (e.g., because MS Graph v1 was deprecated), you must replace the old app, not run both.

How are users detected when synced through SCIM?

User awareness requires:

The user synced through SCIM
The ZTNA client installed (no login needed)
The ZTNA client provides identity signals via the endpoint.

If a user without a ZTNA license has the client, can they connect?

No.
They will be identified, but they cannot remotely connect.

API & Logging Questions

Why is Arctic Wolf only receiving IPS/security events and not network events?

Check the API key permissions.
Old API keys had limited controls; new RBAC-enabled keys allow specifying full access. Updating the key typically resolves this.

Cato recommends using: