Product Updates - August 11, 2025

New Features & Enhancements

• AI Assistant Includes API and Generates Queries: The AI Assistant now provides Cato API guidance and helps with GraphQL query generation. Simply start your prompt with /api and ask natural language questions to:
  • Get information about the Cato API
  • Create general GraphQL queries (these do not include data specific to your account)
  • Click here to watch a video recording of this feature

• Enhanced Admin Experience for App Control and Data Protection Policies: Easily manage complex rulebases with more speed, flexibility, and control across Application Control, Data Protection, and File Control policies. Enhancements include:
  • GraphQL API support – Automate policy rule management using the Cato API. For details, see the Cato GraphQL API Reference
  • Concurrent editing – Multiple admins can modify policies in parallel without conflicts
  • Improved performance – Policy pages are more responsive, especially for rulebases with a large number of rules

• Custom App Control & Data Protection User Client Notifications: If an Application Control or Data Control rule blocks a remote user’s action, a notification is displayed. You can now customize the title and text of this notification to provide a tailored message, in any language, for your organization.

• Support for Custom SCIM App Integration in CMA: You can now streamline user provisioning and management by integrating custom SCIM apps with your Cato account, for IdPs that don’t have a Cato SCIM app.
  • Configure a custom SCIM app directly in your IdP to sync users with Cato
  • Use the SCIM API to create a custom SCIM integration
  • Click here to watch a video recording of this feature

• Manage Site Bandwidth License via API: There are new beta APIs to assign, replace, update, and remove site licenses for single and pooled licenses. For more information, see Cato API Changelog.
  • Click here to watch a video recording of this feature

• Terraform Modules for Bulk Network Range Provisioning: The new Network Ranges module (network-ranges-bulk) lets you automate large-scale provisioning of network ranges for sites using Infrastructure as Code. They integrate with CI/CD pipelines and support concurrent policy management, enabling multiple admins to edit and publish the network ranges in parallel.