Device Posture checks can run continuously at configured intervals, even before the Client connects. This helps keep device posture data up to date. This feature is currently called Advanced Posture, for more information, see Client Connectivity Policy - Improved Posture Checks.
Starting August 7, 2026, this configuration will be enabled by default. The checks will run at the recommended interval of every 10 minutes.
Cato will also update the allowed range for continuous posture checks. The minimum interval will be 5 minutes, and the maximum interval will be 1440 minutes (24 hours).
What is the impact to my Account?
This update helps keep device posture data current and can reduce authentication time for users connecting with the Cato Client.
The following changes will apply to your account:
- For accounts that have not configured device checks to run continuously:
- Device checks will start to run continuously
- The periodic posture check interval will be set to the recommended 10 minute cadence
- If you have changed the periodic check interval, this will be updated to 10 minutes
- For accounts that have configured device checks to run continuously:
- Accounts with a posture check interval outside the valid range will be updated to 10 minutes
- For all accounts:
- The Resources > Device Posture > Settings tab will be renamed Check Policy and contain user experience updates and improvements
What Action Do I Need to Take?
No action is required.
After this change is made, you can configure device checks to not run continuously, although Cato does not recommend it. You can also change the posture check interval to any value within the allowed range.
The recommended posture check interval is 10 minutes.
To update these settings, go to Resources > Device Posture > Check Policy in the Cato Management Application.
Who Do I Talk to If I have Questions?
Please use Cato Ask AI in the CMA to answer questions about configuring the Check Policy for continuous device checks.
0 comments
Please sign in to leave a comment.