Working with Cato License Types

This article explains the different Cato licenses and information in the License screen.

Overview of Cato License Lifecycle and Notifications

Cato provides two types of account licenses: commercial and trial. Customers purchase commercial licenses from Cato for one or more years. The default length of a trial license is 30 days. The start and ending date of Cato licenses are based on UTC+03:00.

These are the different sections in the License window:

  • Account - The General section shows the status of the account license

  • Services - The ​Services​​ section shows license information about the different services that customers can purchase from Cato, for example: Threat Prevention, CASB, DLP, XDR Pro, and SaaS Security API
  • Public IP addresses - The IPs section shows the number of public IP addresses allocated for the account

  • Sites - The Sites section shows the licensed

  • SDP users - The Users section shows the number of licenses for SDP users

To purchase, upgrade, or renew a license, please contact your Cato representative or reseller.

Life Cycle for Accounts

The different statuses that are part of the life cycle for your Cato account, as displayed in the Account Status field:

  • Trial - A temporary account status that is valid for an ongoing PoC

    • During the account trial, all sites and services are enabled

    • Admins can create sites without assigning a license to the site

  • Commercial - The Cato platform is active, and the account includes licenses for all purchased services

    • The License Expiration shows the current end date of the Commercial account term

  • Lock - Cato customers that need to renew their Cato service, and the platform is still active

    • When the account is locked, admins can't log in to the Cato Management Application (CMA)

    • For partner accounts, when a managed account is locked, the partner admins can configure settings for the account

    • All service and traffic are active, however some CMA features are not available, for example, the Monitoring > Best Practices page

  • Disable - The account service is expired, the account doesn't pass traffic, remote users can't connect via the Cato Client, and admins can't log in to the Cato Management Application

Cato sends notifications to customers about the expiring Commercial term as follows:

  • 30, 14, 7, and 3 days before the license expires

  • When the account moves to a different status

Note

Note: Notifications for expiring licenses are only sent when the License Updated option is enabled for the System Notifications.

Life Cycle for Licenses

There are two types of licenses for site bandwidth and services, Commercial and Trial.

Trial licenses are used to test the Cato platform and services, and are valid from the moment they are added to the account for 30 days.

Commercial licenses for site bandwidth and services have the same expiration date as the account term (Cato refers to this as co-term).

These are the different license statuses:

  • Trial - A temporary license that is used to test a site or specific service

    • Trial licenses are valid for 30 days.

    • When there are sites with trial licenses that are expired or about to expire, the Cato Management Application shows a banner indicating the expiration date for these licenses. The banner is displayed on all pages until all sites have valid licenses.

  • Commercial - The license is active

    For more information about licenses for site bandwidth, see Managing Site Bandwidth Licenses.

  • Scheduled - a purchased license that is scheduled to start at a future date

    • When you assign a Scheduled license to a site, the site remains disabled and no traffic passes until the start date of the license.

      Once the start date is reached, it automatically converts to a Commercial license and the site connects to the Cato Cloud and passes traffic.

      For IPsec sites, the expected behavior is that the tunnel is only established when the license switches to Commercial.

    • Once the start date is reached, it automatically converts to a Commercial license

  • Lock - The trial license for the site or service is expired

    • The site still passes traffic and the services are active

  • Disable - The trial license for the site or service is expired

    • The site still does NOT pass traffic and the services are NOT active

Cato sends notifications to customers about expiring licenses as follows:

  • 14, 7, and 3 days before the license expires

Assigning Site Licenses for Accounts that Move from Trial to Commercial

For trial accounts, all the sites are assigned trial licenses and traffic and services are active. When the account reaches the Commercial term start date, the site licenses expire and are moved to the Lock status as follows:

  • The sites pass traffic and the services are active

  • Admins can't make changes to the sites

  • A banner is shown on each page in the Cato Management Application with the list of sites that are in the Lock state

  • Email notifications are sent to admins 14, 7, and 3 days before the license expires

Assign a Commercial license to each site. For more information, see Managing Site Bandwidth Licenses.

Showing the Licenses

The License window shows sections with the following information:

  • General - account license

  • Services - licenses for Cato services such as Threat Prevention, CASB, and DLP

  • IPs - number of available public IP addresses

  • Sites - site licenses

  • Users - SDP user licenses for Cato Clients

  • Lifecycle - changes to license settings

To show the details and status of the licenses:

  • From the navigation menu, click Administration > License.

License_General.png

Understanding the General License Section

These are the fields for the General account license:

  • License Type - Shows the account license type: Commercial, Trial, Locked, or Disabled.

  • License Expiration - Shows the calendar date when the account license will expire.

  • DPA Version - Shows the version of the Data Processing Agreement (DPA) that your company signed with Cato.

    For more information about Cato's data retention policy, see Guide to Cato Data Lake Storage.

  • Data Retention Period (Months) - Shows the number of months that Cato stores the data for your account.

Understanding the Services Section

The commercial license life cycle for Cato Services is the same as the account license, and both licenses expire on the same date. Cato sends notifications to customers about an expiring license 14, 7, and 3 days before the license expires. Examples of Service licenses include: Threat Prevention, CASB, DLP, XDR Pro, and SaaS Security API.

For trial security Services licenses, the expiration date is usually different than the account.

These are the fields for a Services license:

  • Service - Name for the Cato service.

  • Enabled - When enabled, the license is active and the service can be enabled for the account.

  • ​​Total Licenses​​ - Total number of licenses available for the relevant services. For example, the ILMM license shows the number of sites that are monitored.
  • Life Cycle - Shows the service license type: Commercial or Trial.

  • Expiration - For trial licenses, shows the expiration date.

Understanding the IPs Section

These are the fields for public IPs for the account:

  • Licensed - Number of IP addresses assigned to the account

  • Used - Number of IP addresses that are already allocated in Configuration > Global Settings > IP Allocation

  • Unused - Number of IP addresses that are currently unassigned and waiting to be allocated

Understanding the Users Section

The Users section shows the number of available licenses for SDP users. Each user can connect to the Cato Cloud with one or more of the Clients for the different operating systems. Disabled SDP users don't use a SDP user license.

Assigning SDP User Licenses to Different Users

If you have more users than available SDP user licenses, you can choose to assign the licenses to different users. Disable the current users that no longer require a license, and then enable existing users or create new ones.

For more about assigning licenses to users, see Assigning SDP Licenses to Users .

Understanding the Lifecycle Section

The Lifecycle section in the Licenses window shows the timestamp for changes that were made to licenses in your account.

Was this article helpful?

1 out of 3 found this helpful

0 comments

Add your comment