The Audit Trail page displays a chronological log of actions taken by administrators in the Cato Management Application (CMA). For example, the log contains entries for additions, deletions, and edits of items such as rules, configurations, settings, and more. The page displays the previous and new values for a change.
You can see information about CMA admin logins on the Home > Events page. Use the sub-type Cato Management Application.
In the Audit Trail page, you can see information about actions taken by administrators during a specific time period. You can use the search bar to filter the Audit Trail by modules, types, administrators, and actions.
For some policies, such as the Internet Firewall and WAN Firewall, you can view the value of a field before and after it was changed.
To show the Audit Trail for CMA admins:
- From the navigation menu, click Account > Audit Trail.
You can filter the Audit Trail page by using the time range filter, selecting a Custom Preset filter, manually creating a filter, or using a natural language search. The Audit Trail page supports showing data for the previous 12 months and you can view up to 3 months of items at one time. The Audit Trail is not part of Cato's Data Lake.
For more information, see the following articles:
14 comments
How many months are audit trail logs retention periods?
Unfortunately the details of each change are not recorded, so this is half-baked at best.
Fuvabrain Support Sorry for the delayed response, the Audit Trail page can show data for the previous 12 months.
This knowledge article states that data from the past 12 months can be viewed, but in my environment, it seems that only up to 3 months of data is available, similar to the Events section. Has the specification changed?
Kojiro Zaitsu - thanks for the question!
is there any option to have more detailed audit logs with the information what changed not only “modified” ?
Will the audit trail be enhanced to provide to show what the values that were modified were before and after the change? Also, will there be an method to export the report for auditors or examiners?
Milosz Berlik and Andrew Ackman Yes, we are planning to provide enhancements for more detailed audit logs that show what was modified, and for Audit Log reports.
I recommend that you follow the Cato Product Roadmap article to receive an email notification when these enhancements are In the Works.
Is there a way to export this data in csv or pdf to review it offline?
Bob Poulin Currently, you can't export the Audit Trail to a CSV or PDF.
Please submit an RFE or add a post to the Idea Hub
Is there a way to get notified when changes are made?
Jack Senesap - Currently, there is nothing in the CMA to send notifications for Audit Trail updates.
Please submit an RFE or add a post to the Idea Hub
As a workaround, you can use the auditFeed API to connect to an external integration. The Cato Ask AI provided a good explanation of this.
I received an email on 3/8/26 saying that “provides additional granular details” but its not clear what these additional granular details are. Can you please provide specifics on what changed?
Hi Cato_Fan_22,
The details that were added on 3/8/26 are documented here
Please sign in to leave a comment.