The Cato Client is proprietary endpoint software that delivers secure access, advanced security enforcement, and monitoring capabilities. Downloading, installing, and connecting the Client is a simple process that enables you to quickly begin using its features and realizing value.
Depending on how your organization has configured the remote access policies and Client settings, the behavior and available features may vary. Some options described in this article might not apply to your specific installation.
Note: Before installing the Windows Client, review the Prerequisites (especially the minimum device operating system) listed in Preparing to Install the Cato Client.
The Client runs in the background on the device and contains a suite of features to secure your network, devices and identify and support your users.
The capabilities of the Client can be grouped into six key capabilities:
- Identification and Authentication
- Device Posture
- Secured Remote Access (requires a ZTNA license)
- Secured Internet Access (requires a ZTNA license)
- Digital Experience (requires a DEM license)
- User Engagement
For more information, see Understanding the Capabilities of the Cato Client.
The Client may have been automatically installed on your device which means you can use the instructions below to add a user and connect. If the Client was not installed, you can download and install it following the steps below:
To download the Windows Client from the Cato website:
- From a browser, open the Client download portal, and select the Windows tab.
- Click Download. The installation file is saved to your device.
To install the Windows Client on your device:
- Open the Windows Client installation file that you downloaded in the previous section and follow the steps in the installation wizard.
- After you install the Client, open Cato VPN Client from the desktop.
The Client can also be installed with the command line. For more information, see Installing the Cato Client.
You can add more than one user to the Client. To add a new user, on the User tab, click Add User and sign in with your email and password (and MFA) or SSO
Once you have installed the Client, sign in to connect to the network. You can sign in with your email address and password (and MFA method) or with SSO.
In the Client, click the Connect button and enter your email address. You will then be sent an email that explains how to create your password.
Once you have created your password you can sign into the Client and connect to the network.
Note
Note: You may have received the email the with an explanation on how to create your password before you click Connect.
Once the Client is installed and a user is added, you can connect to your network with the Client.
By default, the Client automatically connects to the optimal PoP based on geolocation and connectivity metrics. For more information on the Client connection process, see Preparing to Install the Cato Client.
You can override this process by manually entering the IP address of a specific PoP you want the Client to connect to. To view the IP addresses of Cato's PoPs, see Production PoP Guide.
You can view the Client connectivity status in the Client or using the Windows tray icon. The symbols for each connectivity status are:
| Symbol | Description |
|---|---|
| The Client is connected. | |
| The Client is connected but has a warning. | |
| The Client is connected but has an error. | |
| The Client is disconnected. | |
| The Client is disconnected due to an error. | |
| The Client is bypassing the Cato Cloud. For more information, see Protecting Users with Always-On Security |
Based on the configuration of the Client Connectivity policy the Client checks your device has the required software or updates installed before it allows you to connect to the network. For example, the Client checks if you have an up-to-date antivirus software installed. Only secure and compliant devices are allowed to connect. If the device doesn't comply with the Client Connectivity policy, the Client is blocked, and there is a notification with more details.
If your device doesn’t meet the security policy, the Client doesn't connect and shows a message explaining the issue. Common reasons include:
- Out-of-date antivirus software version
- An unsupported operating system
- Need to update the Client to a newer version
Click Details in the message to see what failed.
13 comments
If I start the case application and click the connect button on the disconnected screen, it will remain connected and continue changed.
Account:man-to-man
user name:watanabe-h@man-to-man-g.com
PC OS:Windows11 Pro.
Hi. Do you think it would be possible to have the file version and upload date of the SDP client displayed on the Download page? It'd be way easier to know if a new version available.
Hi bmeid,
This is good feedback which I will pass on to our product team.
New Clients are always announced in our Release Notes or you could click Follow on the article for the relevant OS under Summary of Cato Client Releases. Then you will get an email when a new version is added to that page.
Hi Hiroshi Watanabe,
Are you still facing this issue? If so, please contact you administrator to open a support ticket.
Hi
Is there a MSI. file for the installation?
Hi Matias Hillgaard,
Yes there is. You can download it from the Client Rollout page or this link.
For more information, take a look at this article: How Can I Download the Cato Client?
Hi Michael
Thanks for the quick answer! Just what i needed.
Is there a way to do this by injecting a registry entry in a windows OS?
Hi Michael Lavin,
No this is not supported. If required, you can open an RFE for the Product Team to review the feasibility. For more information, see Requesting New Features (RFEs).
Can I allow a user to enable and disable the client by himself?
The default it is do not allow the user to disable it, right?
So where You can manage this options?
Thanks
Domenico
Domenico Iandoli Do you mean the ability to connect and disconnect from the network? This is managed through the Always-On policy
When Always-On is enabled, users can only disconnect from the network with bypass (either user-controlled, or with a bypass code)
Is the Cato client for Windows a 32-bit or 64-bit app? If 32-bit, are there plans for a 64-bit app?
Thanks
John
Hi Jon,
The Cato Client for Windows supports both 32-bit and 64-bit architecture from Windows 10 and higher. The only exception is the Anti-tamper feature, which is only supported on 64-bit.
Regards,
Yaron
Please sign in to leave a comment.