Product Updates - December 1, 2025

New Features & Enhancements

  • CMA Ask AI Gives Account-Specific Answers: You can now use the Ask AI tool in the Cato Management Application (CMA) to get real-time and historical insights into your sites, users, applications, devices, bandwidth, and overall network health. 
    • Ask questions such as “Which sites used the most bandwidth yesterday?” or “How many users are connected right now?”
    • Automatically determines whether to give an account-specific or general answer
    • These advanced capabilities are now available as part of a free trial
    • Click here to watch a video recording of this feature
  • New CMA Demo Account: Demo Mode gives you instant access to a Cato-maintained demo account with sample data, a fully licensed environment that includes all Cato services.
    • Explore new features, review configurations, and experience the platform as if it were a live account
    • An in-app guide overlay is available to walk you through key capabilities with self-guided tours
    • Currently, the demo account is only available for customers running the CMA in the default EU region
    • To start exploring, go to Ask AI > Demo Mode
  • Track the Status of Configuration Changes: View the real-time status of changes to policies as they are applied to your account. This provides clear visibility into when the changes are fully deployed and actively impacting traffic in your network.
    • Displayed in the notifications area at the top of the CMA in the My Policy Changes tab
  • Improved Visibility for App Usage: We’ve introduced new Cloud Apps Overview and Inventory pages to replace the Cloud Apps dashboard. The new pages provide complete visibility and control over SaaS app usage and risk.
    Gain insights into how cloud apps are used across your organization, who is accessing them, and what data is being shared, all from a unified dashboard.
    • Discover Shadow IT: Identify unsanctioned applications and risky usage patterns
    • Monitor & Secure SaaS Usage: Track app activity to safeguard corporate environments
    • Protect Sensitive Data: Detect data exposure across SaaS platforms
    • Investigate in Depth: Use the integrated app inventory to analyze app metadata, user access, and data-sharing trends
    • CASB license required
    • Click here to watch a video recording of this feature
  • Android Client v5.3: The new Client will be available to download from the Google Play Store the week of November 30, 2025. This version includes:
    • Stability improvements
    • Security updates
    • Bug fixes
  • Device Posture Profile Included in Device Inventory: For improved visibility into device posture and how it affects access decisions, a device’s Posture Profile is displayed in the Device Inventory.
    • The Device Posture Profile is included in the Quick View panel after you click a device
    • Requires IoT/OT Security license

Note: Content described in this update is gradually rolled out to the Cato PoPs over a two-week period. In addition, new features are gradually activated in the Cato Management Application over the same two-week rollout period as the PoPs. For more information, see this article. See the Cato Status Page for more information about the planned maintenance schedule.

Was this article helpful?

0 out of 0 found this helpful

0 comments