Product Updates - October 6, 2025

New Features & Enhancements

• New Browser Extension Version: In the coming weeks, Cato is gradually releasing Browser Extension v1.1, which includes the following features:
  • Browser Extension WAN Access: The Cato Browser Extension now lets users securely access WAN applications (HTTP/S) directly from their Chrome browser
  • This version requires that TLS Inspection is enabled
  • Improved monitoring for when the Browser Extension disconnects from the PoP
• New macOS Client v5.10.5: Starting October 5, 2025, we will gradually roll out the new macOS Client version 5.10.5. This version includes:
  • Support for macOS Tahoe version 26
  • Stability improvements
  • Security updates
  • Bug fixes
• X1700B Socket Supports Higher Port Density for Data Center and Campus Sites: We added the option to use two add-on port cards, allowing a total of eight 10Gbps fiber ports.
  • Use the Site Configuration > Socket page in the CMA or the addSocketAddOnCard API to enable the second card
  • Supported for Socket v24 and higher
  • Previously, only a single add-on card was supported
• Upcoming Change to Cato Password Policies: To enhance security and align with industry best practices, we will update the password requirements for both SDP users and CMA admins. We will start rolling out this change on October 15, 2025, for new or updated passwords.
  • This impacts CMA admins and SDP users authenticating with a Cato password
  • Passwords must contain one of each: lowercase letter, uppercase letter, number, and a special character (new requirement)
  • Additionally, admin passwords cannot contain an email address or be on our list of common passwords (e.g., aB12345!)
  • This change applies only to newly created or updated passwords. There is no impact on existing passwords
• Read IPsec Tunnel Configurations via API: You can now programmatically retrieve all IPsec tunnel configurations using the Cato API. This streamlines tunnel monitoring and configuration management across large deployments.
  • Access detailed IPsec tunnel configuration data via the tunnelConfig object under IPsecInfo in the accountSnapShot query

PoP Announcements

• Lima, PE: A new range (199.27.45.0/24) will soon be added to the Lima PoP location.