By default, Cato reserves the private IP prefix 10.254.254.0/24 as the internal System Range of your account. This range must be allowed within the network, IPs in the System Range allow for Cato's features to work properly in your account.
This article includes mapping of IPs in the System Range and their purpose, refer to this mapping to identify System Range hosts within your network traffic.
If you want to monitor the availability of the default Cato System Range, you can set up a continuous ping with ICMP to 10.254.254.1 (for a customized range, use X.Y.Z.1 such as 192.168.1.1
In case the default reserved 10.254.254.0/24 IP prefix does not fit your environment's network design, you can modify the System Range to a custom range of your choice.
If you need to modify the System Range, please reach out to Cato Support.
Reserved IPs of the System Range can be identified in multiple interfaces such as PCAPs, routing tables, the Socket WebUI, the Cato Client, and more.
The following table lists known internal hosts and their functions. When you change the System Range to a custom IP prefix the mapping of hosts changes as well, this mapping can be found in the Custom Range IP Address column below.
Additional private IPs (not included in this table) are used for internal purposes. Please reach out to Cato Support if you have questions on IPs within the System Range that are not listed below.
|
Item |
Description |
Default Range IP Address |
Custom Range IP Address |
|---|---|---|---|
|
DNS |
Default DNS server |
10.254.254.1 |
X.Y.Z.3 |
|
User Awareness Client |
Source for WMI queries sent to Directory Services |
10.254.254.12 |
X.Y.Z.9 |
Note
Note: It's advised to flush the DHCP cache of your connected devices once the System Range is modified.
1 comment
Removed Local Gateway as a reserved IP for the System Range as it is no longer relevant.
Please sign in to leave a comment.