Getting Started with the macOS Client

This article explains how to install the macOS Client on your device and connect to the Cato Cloud.

Overview

  1. Download the macOS Client.

  2. Install the Client on your macOS device.

  3. Open the Client and sign in to connect to the network.

Prerequisites

  • System level notifications must be enabled on the device to authenticate using the browser within the Client (Embedded browser).

  • The Client is Allowed in the background (This is enabled in Settings > General > Login Items)

  • The Client requires Full Disk Access permissions for Device Posture checks and collecting logs.

Downloading the macOS Client

You can download the macOS Client onto your device from the Client Portal.

To download the macOS Client from the Cato website:

  1. From a browser, open the Client download portal, and select the macOS tab.

  2. Click Download. The installation file is saved to your device.

Installing the macOS Client

Once you download the Client, you can install it on your macOS device.

To install the macOS Client on your device:

  1. Open the macOS Client installation file.

  2. Follow the steps in the installation wizard.

  3. When the Installer pop up is displayed, enter the device password.

    Installer.png

  4. In the System Extension Blocked pop up, click Open System Setting.

    System_Extension_Blocked.png

    1. For macOS versions Sequoia (15.0) and above:

      1. In the General section, navigate to Login Items & Extension.

      2. Under the Extensions section, click Network Extensions i symbol.

        Login_Items_and_Extenstions.png

      3. In the Network Extensions pop up, turn the Cato Client toggle on.

        PoP_up.png

      4. Click Done.

    2. For macOS versions Ventura (13.0) and above:

      1. In the Privacy & Security section, click Allow.

        Privacy___Security1__1_.png

      2. Enter the device Username and Password and click Unlock.

        Privacy___Security.png

      3. Close the Privacy & Security window.

  5. The Client requests your permission to add a new VPN configuration, click Allow.

    Allow_VPN.png

    The Client is installed on your device.

macOS_AddUser.png

Signing into the Client

Once you have installed the Client, sign in to connect to the network. You can sign in with your email address and password (and MFA method) or with SSO.

Signing in with Email and Password (and MFA)

In the Client, click the Connect button and enter your email address. You will then be sent an email that explains how to create your password.

Once you have created your password you can sign into the Client and connect to the network.

Note

Note: You may have received the email the with an explanation on how to create your password before you click Connect.

Signing in with SSO

In the Client, click the Connect button and enter your email address. You can then choose to sign in with your SSO credentials.

Adding a New User

You can add more than one user to the Client. To add a new user, on the User tab, click Add User and sign in with your email and password (and MFA) or SSO

Connecting to the Network

After you have added a User to the Client, you can connect to the network.

To connect to the network:

  • From the Home page of the Client, click the Connect button.

    The Client connects to the network.

Note

Note: This is the only supported method of connecting to the network. Connecting from System Preferences > Network on the device is not supported.

Connecting to a Specific PoP

By default, the Client automatically connects to the optimal PoP based on geolocation and connectivity metrics. For more information on the Client connection process, see Installing the Cato Client.

You can override this process by manually entering the IP address of a specific PoP you want the Client to connect to. To view the IP addresses of Cato's PoPs, see Production PoP Guide.

Manual_macOS.png

To select the PoP the Client connects to:

  1. From the navigation menu in the Client, click Users.

  2. Enable PoP Server IP.

  3. Enter the IP address of the PoP you want the Client to connect to.

    The Client connects to the manually selected PoP.

Was this article helpful?

4 out of 10 found this helpful

0 comments