Upcoming Changes to PoPs in the Cato Cloud - November 30, 2024

In the past, some accounts worked with teams at Cato Networks to connect to special Ali Cloud PoP locations. As of Nov 30, 2024, these special PoP locations will be decommissioned and no longer available. To avoid a service disruption you need to change the relevant Network Rules and site settings to use a different PoP location.

These configurations are impacted by the upcoming decommissioning for one or more of the PoP locations (listed below) because they use an IP that belongs to the PoP location:

Network Rules set to egress traffic with Route via or NAT option
IPsec sites - the Public IP for the Primary and/or Secondary tunnel
Socket sites - the Primary or Secondary Preferred PoP Location

Best Practice: Use physical Cato PoP locations for settings in your account.

What PoP Locations are Cato Decommissioning?

These are the PoP locations that will be decommissioned as of Nov 30, 2024:

Beijing_DC4
Shenzhen_DC4

What Changes Do I Need to Make to the Network Rules?

Edit rules in the Network Rules policy (Network > Network Rules) that egress traffic using an IP address that belongs to one of the impacted PoP locations, so that the rule uses a different PoP location. The IP address is defined for the Route via or NAT method.

Note: The best practice is to configure at least two PoP locations to egress from.

What Changes Do I Need to Make to IPsec Sites?

Edit the Public IP or FQDN for the Primary and Secondary tunnel for the IPsec site (Network > Sites > {site name} > Site Configuration > IPsec) and assign IPs from a different PoP location.

What Changes Do I Need to Make to Socket Sites with Preferred PoP Location?

Edit the Primary and Secondary location for the Preferred PoP Location in the Socket sites, and choose a different PoP location.

What Happens If I Don’t Make these Changes?

After Nov 30, 2024, if one of the settings above are configured to use a special PoP location, then there can be connectivity issues and service issues for items that match the Network Rules, IPsec sites, or Socket sites.

Who Do I Talk to If I Have Questions?

Please contact your authorized Cato representative.

Who Do I Talk to If I Have Technical Issues?

Please reach out to the Cato Support team.