Product Update - May 19, 2025

New Features & Enhancements

• New Windows Client v5.15 Release: During the week of May 19, 2025, we are starting the rollout of the new Client version for Windows (v5.15). This version includes:
  • Advanced Device Posture Collection: To improve performance when connecting, Device Posture is now collected continuously, even before connecting, to ensure Device Posture stays up-to-date.
  • Bug fixes and enhancements, including:
    • Improved the Client flows for better connection and reconnection time, and reduced errors
• Reporting Client Version Known Limitations and Resolved Issues: We are now reporting the Known Limitations and Resolved Issues as part of the Client releases.
  • You can also ask the Knowledge AI Assistant in the CMA for information about Client versions
• Enhanced Admin Experience for Managing TLS Inspection Policy:  We have enhanced the TLS Inspection Policy to give administrators more flexibility, speed, and control when configuring policies.
  • API support for managing the policy
    For more information see the Cato GraphQL API Reference
  • Ability to modify the policy in parallel by multiple admins
  • Faster and more responsive for policies with many rules
• Identical Internet-Only IP Ranges: To simplify network management and improve security for guest traffic, you can now configure identical IP ranges in multiple sites to be used for Internet-only traffic. These ranges are not propagated to the global routing table, preventing communication with the WAN.
  • We recommend as a guest WiFi best practice, to use the Internet-only ranges together with the Cato captive portal
  • Supported for physical Sockets only, v21 and higher
  • Click here to watch a video recording of this feature
• BGP Inbound Route Filters for Socket Sites: We are adding support for inbound Route Filters, providing granular control and improved scalability to accept or drop BGP routes.
  • You can use CIDR lists or BGP communities to determine which routes to filter
  • Supported for Socket sites v21.1 and higher (support for IPsec sites is coming soon)
  • Click here to watch a video recording of this feature
• New PoP Location for Cloud Interconnect: A new PoP for Cloud Interconnect in Los Angeles is now available to immediately connect a site, expanding connectivity and access on the West Coast of the US.
• API Support for App Catalog and DLP Content Types: We added the following new API queries:
  • App Catalog - Query the data for apps, including Compliance, Security, and CASB Activities:
    • catalogApplicationList - All apps and data
    • catalogApplication - Single app
  • DLP Content - Query the types of content for the DLP Data Inline Protection rule
    • contentTypeGroupList

PoP Announcements

• New ranges are available for the following PoP locations:
  • Charlotte, US: 199.27.39.0/24
  • Seattle, US: 199.27.38.0/24
  • Tokyo, JP: 123.253.154.0/24