Product Update - June 16, 2025

New Features & Enhancements

• Enhanced Admin Experience for Managing the Split Tunnel Policy at Scale: We improved management of the Split Tunnel Policy with the following features:
  • Ability to modify the policy in parallel by multiple admins
  • A faster and more responsive page for policies with many rules
  • Public API support will be available soon
• Additional Data in Device Inventory: The Device Inventory page now includes detailed drill-down views, giving you deeper visibility into device activity to help you monitor usage, troubleshoot issues, and strengthen security. The new drill-down includes:
  • The applications and domains each device interacts with
  • Detailed connectivity insights per device
  • Click here to watch a video recording of this feature
• MCP Server Now Available on GitHub: We implemented a new MCP (model context protocol) server that lets you interact with your account using natural language with questions such as “Which sites are currently in a degraded state?” with no coding required. See this blog post about using Cato’s MCP server as a smarter way to integrate AI into your IT and security processes.
  • This is an open-source implementation and Docker image of an MCP server, which is now available on GitHub. The MCP server uses the entityLookup and accountSnapshot APIs
  • Click here to watch a video recording of this feature

PoP Announcements

• Buenos Aires, AR: A new Cato PoP will shortly become available in Buenos Aires with the IP range 199.27.41.0/24.
• New ranges are available for the following PoP locations:
  • Milan, IT: 159.117.227.0/24
  • Zurich, CH: 159.117.226.0/24

Knowledge Base Updates

New articles that provide admins with a clear pathway for migrating existing user and group provisioning from LDAP to SCIM.