Summary of Cato Linux Client Releases

This article summarizes features, enhancements, of Linux Clients.

In addition, it also lists the known limitations.

Admins and users can easily download the Client from the Client download portal without requiring authentication.

For more information about the requirements to implement Cato's remote access in your organization, see Installing the Cato Client.

Linux Clients

This section summarizes the features and enhancements of Linux Clients:

Linux Client v5.2.1.1

From June 6th, 2024, we are starting the rollout of Linux Client version 5.2.1.1. This version contains an important security update and bug fixes. For details of these updates, see these articles:

Linux Client v5.2

From, Jan 22nd, 2024, we started the rollout of Linux Client version 5.2. This version contains:

Connect on Boot: The Client connects to the Cato Cloud automatically, without any user interaction, after the device boots
User Authentication is No Longer Required Behind a Site: To simplify the user experience for users behind a site, the Client can connect automatically in Office Mode without users manually authenticating. There is no impact on Security and User Awareness polices
Bug fixes and enhancements, including:
- Improved process for prioritizing which PoP the Client connects to
- Faster time to reconnect when the Client changes from an out of office network to an office network

Linux Client v5.1.0.21

Linux Client version 5.1 was uploaded to the User Portal on Nov 1st, 2023. This version contains bug fixes and enhancements including:

Resolved these issues in browserless mode (headless):
- The Client didn’t automatically recognize a headless device
- The SMS message for MFA was not sent
- After the SSO token expired, the Client could not reconnect

Linux Client v5.1

Linux Client version 5.1 was uploaded to the User Portal on July 2nd, 2023. These are the features and enhancements for this version:

New Device Posture Check Provides Increased Security: You can now include Anti-Malware, Firewall, Patch Management and Device Certificate checks within your Device Posture Profiles. The Device Posture Profile can be included in your Client Connectivity and Security policies. These checks include:
- Increase access control capabilities by ensuring the SDP users or user groups in the policy have the required device posture before connecting to your network
- Define Device Posture requirements in your Security policies to access corporate resources
User Awareness Support for Linux Devices: Cato’s Identity Agent for Linux Clients supports User Awareness for users provisioned with all supported IdPs.
Browserless Support for SSO: You can now authenticate with SSO on headless devices, without a browser.
- This is supported on Azure SSO, and requires authenticating via another device.
Support for Cato Automatic Upgrades: Starting from this version, Linux Clients can be automatically upgraded using the Cato upgrade service.

Linux Client v5.0.2

Linux Client version 5.0.2 was uploaded to the User Portal on November 13th, 2022, and includes:

Bug fixes and enhancements
Starting with v5.0.2, SDP users can authenticate based on the settings in the Cato Management Application using SSO or username & password

Linux Client v5.0

Linux Client version 5.0 was uploaded to the User Portal on July 11th, 2022, and includes:

Support for Single Sign-On (SSO) with external browsers.
- Requires Linux browser for authentication
- Supported Linux OS 64-bit (X86_64) versions:
  - Ubuntu v18 and higher
  - CentOS v8 and higher
  - Fedora v36 and higher
  - Debian v11 and higher
  - Mint v20.3 and higher
Automatic authentication with cached credentials
Tunnel resiliency and automatic tunnel recovery

For more information about using the Linux Client, see Installing and Running the Linux Client v5.0 (EA).