Upcoming Deprecation of User Selection Mode for MFA Authentication

In your Client Authentication Policy, you configured User Selection Mode for MFA Authentication. This means MFA is the default authentication method for remote users in the Cato Client. However, MFA Authentication can be bypassed, and remote users can authenticate and connect to your network using only a username and password.  
 
From May 12th, 2024, to increase the security of your account, this option will no longer be available at an account or user level. To continue to use MFA, you need to change your Client Authentication Policy mode to Enabled before this date. Alternatively, if you do not want to use MFA, you can change your default authentication method to User & Password.  

You can override the account policy and customize settings for specific users to allow them to connect with only their username and password. For more information, see Configuring the Authentication Policy for Cato Clients. 

What is the Impact to the Account?

If you do not update your Cato Client Authentication Policy by May 12th, 2024, some users may not be able to authenticate and connect to your network.  

What Action do I Need to Take?

This is how your Client Authentication Policy (Access > Client Access > Authentication) is currently configured: 

Before May 12th, 2024, you must make one of these changes to your Client Authentication Policy. 

Option 1

Change the Mode for the MFA authentication method to Enabled. 

For more information on how to change your Client Authentication Policy, see Configuring the Authentication Policy for Cato Clients. 

Option 2

Change the Default Method for authentication in your account to User & Password.  

For more information on how to change the default authentication method, see Configuring the Authentication Policy for Cato Clients. 

What are the Changes to my Account?

After May 12th, 2024, your Client Authentication Policy will look like this:  

Who Do I Talk to If I Have Questions?

Please contact Support.