Cato Product Catalog

Cato Bandwidth Pool license provides secure, optimized, and resilient connectivity across sites and cloud environments via the Cato Cloud, including Socket, vSocket, IPsec, and Cloud Interconnect. Socket sites include the LAN Firewall service. This license type supports the connectivity of IPsec sites via SSE type.

Bandwidth Pool is licensed by bandwidth, in units of Mbps per region group.

Cato ZTNA User license enables individual users to securely connect to the Cato Cloud from any location. Connection options include Cato Client, Browser Extension, Enterprise Browser, and clientless browser Applications Portal.

ZTNA Users are purchased per region group and measured across the total number of users in the account.

Cato Advanced Threat Prevention (ATP) provides enhanced protection against advanced and unknown threats for traffic across the Cato Cloud. This license bundles Threat Prevention, Dynamic Threat Prevention, Sandbox, and Remote Browser Isolation (RBI) capabilities.

ATP is licensed based on Bandwidth Pool and ZTNA Users and must cover the total licensed capacity.

Cato Threat Prevention provides real-time, inline security inspection and enforcement for traffic across the Cato Cloud, including traffic from sites, remote users, and cloud resources. It enables detection and prevention of known, unknown, and evasive threats for traffic to the Internet, SaaS, and internal resources.

TP is licensed based on Bandwidth Pool and ZTNA Users and must cover the total licensed capacity.

Cato Cloud Access Security Broker (CASB) provides visibility and control over the use of cloud and SaaS applications across the Cato Cloud. CASB enables organizations to discover application usage, assess risk, and enforce granular policies to govern access and data usage.

CASB is licensed based on Bandwidth Pool and ZTNA Users,, and must cover the total licensed capacity.

Cato Data Loss Prevention (DLP) provides controls to detect and prevent unauthorized exposure of sensitive data across the Cato Cloud. DLP enables organizations to identify, monitor, and control the movement of sensitive data across applications and destinations.

DLP is licensed based on Bandwidth Pool and ZTNA Users and must cover the total licensed capacity.

Cato Assets Security provides device identification, classification, and control for connected devices across LAN and Cato Cloud environments. It includes micro segmentation capabilities to enforce a zero-trust posture within LAN environments.

Assets Security is licensed based on the bandwidth (pool,provides or sites, or both) purchased at the account.

Cato Endpoint Protection Platform (EPP) provides endpoint-level threat prevention and malware protection for user devices.

EPP is licensed by users.

Cato AI Security for Users provides discovery, observability, and policy enforcement for user interactions with public AI services accessed through the Cato Cloud.

AI Security for Users is licensed by users.

Cato AI Security for Applications provides runtime security, governance, and compliance for internally developed AI applications and self-built agents.

AI Security for Applications is licensed by users who represent the total number of employees in the organization.

Cato Digital Experience Monitoring (DEM) provides visibility into user and application experience across the Cato Cloud. It enables monitoring, performance analysis, and troubleshooting of users, applications, and network paths.

DEM is licensed by users.

Cato XOps lets you monitor, analyze, and respond to events affecting users, sites, assets, and applications across the Cato Cloud.

XOps is licensed based on Bandwidth Pool and ZTNA Users and must cover the total licensed capacity.

Cato Data Lake Storage provides centralized storage and retention for events generated across the Cato Cloud.

The Data Lake is licensed using Data Units (DU). Each Data Unit provides a fixed event ingestion capacity of 2.5 million events per hour, combined with a selected data retention period (3, 6, or 12 months).

The default customer license includes 2.5 million events per hour with 3-month retention.

NOCaaS (Network Operations Center as a Service) provides customers with continuous access to Cato’s 24/7/365 Network Operations Center (NOC). It delivers proactive monitoring and operational support and combines Intelligent Last-Mile Monitoring (ILMM) and Hands-Free Management into a single service.

NOCaaS is licensed by sites.

Cato Intelligent Last Mile Monitoring (ILMM) is a managed service that continuously monitors last-mile internet circuits and works on behalf of the enterprise to resolve blackout and brownout issues with the respective ISPs.

ILMM is licensed by sites.

Cato Hands-Free Management augments the customer’s IT team by offloading day-to-day operational management of the Cato account. Through Hands-Free, a team of Cato experts performs customer-requested move, add, change, and delete (M/A/C/D) operations related to networking, routing, and security policies within the Cato Cloud environment.

Hands-Free Management is licensed by sites.

Cato Managed Detection and Response (MDR) provide access to Cato’s global team of security analysts who monitor, investigate, and respond to security incidents identified by the Cato platform.

MDR is licensed by users who represent the total number of employees in the organization.

Customer Success Engineer (CSE) is a professional services offering that provides customers with access to a named Cato technical expert who acts as the primary point of contact and subject matter expert for the customer account.

CSE is licensed per account on a recurring monthly basis.

Cato Professional Services Engineer (PSE) services provide hands-on technical expertise for deploying and configuring Cato services.

PSE services are licensed by PSE hours.

Cato Technical Project Manager (TPM) services provide project coordination and delivery oversight for Cato deployments.

TPM services are licensed by TPM hours.

Cato Managed Deployment is a predefined Professional Services package that combines TPM and PSE services into a single offering.

Managed Deployment is licensed by packages with a fixed number of TPM and PSE hours.

Cato Gold Support provides enhanced support and includes phone support, assignment of an Advanced Support Engineer, and a 1-hour response time for P1 requests.

Gold Support is licensed per account relative to the total size of the subscription.

Cato Platinum Support provides the highest support level, including assignment of a Senior Support Engineer, 30-minute response time for P1 requests, and a Support Delivery Manager.

Platinum Support is licensed per account relative to the total size of the subscription.

Cato X1500 Dual Rackmount Kit enables mounting the Cato X1500 Socket models into a standard 19” network rack.

The X1500 Rackmount is purchased for a one-time fee.

Cato X1600 Rackmount Kit enables mounting the Cato X1600 Socket models into a standard 19” network rack.

The X1600 Rackmount is purchased for a one-time fee.

Cato Fiber Card is an add-on for the X1700 Socket models and provides 1Gb, 10Gb, 25G, and 100G fiber connectivity options. The Fiber Card is shipped with GBICs pre-installed.

Fiber Card is purchased per Socket via payments over the term of the contract.

Cato GBIC (Gigabit Interface Converter) is a hot-pluggable optical transceiver used in compliant gigabit ports on Cato Sockets.

GBIC is sold in sets of two units and purchased per Socket via payments over the term of the contract.

The Cato LTE Antenna Kit enables remote installation of the Cato Socket 1600 LTE antenna when cellular reception is weak or unreliable.

LTE Antenna is purchased for a one-time fee.

The Cato 5G Antenna Kit enables remote installation of the Cato Socket 1600 5G antenna when cellular reception is weak or unreliable.

5G Antenna is purchased for a one-time fee.

The IP Address license provides dedicated public Cato-owned IP addresses assigned exclusively to the customer account. By default, each account includes three IP addresses.

IP addresses are licensed per single IP address.