Welcome to the Cato Community

HiThe following behavior was observed when using the Cato Networks Provisioning application for Okta to provision users to the Cato cloud with SCIM provisioning.The target user of the Provisionig had registered a first name and last name using Japanese 2-by...

Topic Join the conversation!

HelloWhen using Directory Service to retrieve LDAP user information, Is it necessary to configure WMI if User Awareness is not used?Referenceshttps://support.catonetworks.com/hc/en-us/articles/4413265654929-Configuring-the-Windows-Server-for-Directory-Servi...

Topic Join the conversation!

Hello ! I would like to check the behavior when Socket is updated.I have two questions, please answer them. 1. How is HA switching performed when performing Socket update in HA configuration?2. Does a reboot occur even after a minor update? Best Regards.

Topic Join the conversation!

CATO TAC support suggested me to open up a discussion there. Is there any offical information regarding the frequency of IPS/IDC update for CATO?

Topic Join the conversation!

We want to monitor our enviroment. Therefor we need to know th status of our cato boxes e.g. CPU, bandwithHow can this be realized?

Topic Join the conversation!

Hello,The instructions provided in the link below suggest "Avoid Having a Very High Number of Rules". Internet and WAN Firewall Policies – Best Practices – Cato Learning Center (catonetworks.com)In practical terms, how many rules can the Cato Cloud accommod...

Topic Join the conversation!

Error Message after Upgrade - CatoNetworksVPNService is not running:After the latest auto update several internal staff members have reported that they are not able to connect to CATO, we have un-installed and re-installed but the service is not appearing e...

Topic Join the conversation!

Hi.I tested if DLP could detect specific text inside shapes on a Word file. I tried validate from the User Defined Data Types. However, the result obtained from the extracted text by Cato showed the same string being extracted twice.I expected only one stri...

Topic Join the conversation!

Hi Team,I'm Ryo Hanaoka from J's communication Co.I are currently receiving requests from customers.Let me see how the Cato Socket's WAN interface reacts to communication from the underlay.I sent a communication to the socket's WAN interface and verified it...

Topic Join the conversation!

Hi Team,Is it feasible to backhaul traffic to a LAN device in specific site instead of using Networks in Routing?I am asking this because /32 CIDR range settings in Network Ranges for a Site is NOT permitted with the error message "CIDR range must be betwee...

Topic Join the conversation!

Hello.I have attached a simple network diagram to this post. In a certain configuration, there is a network device at Site A assigned a global IP address /32. (Details are unknown, so let's assume it's a web server with the IP address 2.2.2.2/32 here.) Ther...

Topic Join the conversation!

Hello,Current scenario:Datacenter A - VM with IP 192.168.1.100Datacenter B - VM with IP 192.168.1.100 (same ip as VM in Datacenter A)Is it possible route User A when connecting to 192.168.1.100 to Datacenter Aand User B when connecting to 192.168.1.100 to D...

Topic Join the conversation!

Hi Team,I would like to confirm if it is feasible to allocate Multiple IP Range to Dynamic IP in IP Allocation Policy.There is no specific comment on KB.https://support.catonetworks.com/hc/en-us/articles/9412066802205-IP-Allocation-PolicyAt the same time, I...

Topic Join the conversation!

Hello,Regarding the LAN-side failover in the Socket's HA configuration, our current understanding is that Primary and Secondary switch only during LAN & VRRP port failures. Therefore, in a configuration like the attached network diagram, if a fault occurs o...

Topic Join the conversation!

Hi , new to here , wanna know is there anyway to backup the configuration ? in case the configuration goes wrong.

Topic Join the conversation!

I am using AlwaysOn on my iPhone.Since last month, several devices have suddenly become unable to connect to CATO and become unable to use the network.Eventually, I was able to connect by reinstalling the CATO Client app.Have you ever encountered a similar ...

Topic Join the conversation!

We are thrilled to announce the upcoming launch of the Cato Academy portal within the Learning Center.At Cato Academy you will discover an array of eLearning courses, informative videos, professional certifications, and opportunities to register for online ...

Topic Join the conversation!

Hi, My customer is using Cato's Application Control policy to control Office365 tenants to allow login only to their own tenants.On Windows devices this rule works.However, on iOS devices the Application Control policy does not work because TLS inspection i...

Topic Join the conversation!

Hello!Regarding the lanSocketInterfaceId specified in the Cato API's addNetworkRange,Is it not possible to specify this when the LAN port of the Socket is Down?The error message "Lan socket interface with id: XXX is not found" is returned.Best Regards,

Topic Join the conversation!

HelloI have a network rules that is applied to Internet traffic that will NAT to a specific website via a particular IP. I also have a Internet Firewall rules that will block a site from connecting onto the internet. I have noticed that servers behind this ...

Topic Join the conversation!

Hi,My colleague asked me how to change the LAN-side (Native) IP address of a Socket in an HA configuration.I am assuming the following procedure from the Cato Management Application, is there a correct procedure?1.Site Configuration>ROUTING>Networks>LAN>Nat...

Topic Join the conversation!

Hello,Currently, we are reviewing the specifications regarding Cato Identity Agents by referring to the following knowledge base https://support.catonetworks.com/hc/en-us/articles/13815807963293-Using-Cato-Identity-Agents-for-User-AwarenessIn the case of us...

Topic Join the conversation!

We've got a scenario where we have certain vlans on one LAN port which we wish to migrate over to another and I need some advice.It would seem the Exchanging Socket Ports article would fit my scenario for one of my LAN ports I'm looking to relocate as we ha...

Topic Join the conversation!

Hi Cato Community.Our customer used SCIM Provisioning with Azure.Customers are only using Azure AD for Office 365. There is no On-Prem AD.Customers do not have an SDP license.As far as we know, the office mode indicated in the following document requires an...

Topic Join the conversation!

Hello.We have confirmed through our knowledge base that passwords for WebUI need to be changed every 90 days. However, there was an incident where, shortly after changing from the initial password, another change was requested.It seems that this occurred ar...

Topic Join the conversation!

Hello.Is it possible to configure the following settings at the initial setup stage before assigning the X1700?Port 1: WAN1 Port 2: WAN2 Port 3: WAN3 Port 4: LAN1 Ports 5-8: DisabledI am under the impression that only the settings for Port 1 can be configur...

Topic Join the conversation!

Hi, On Knowledge Base, it says “Once a new version is made available to a SDP user, their the version is only installed once the device is turned on and connected the Internet.”1. We have added a few users on the pilot group, but we were wondering if the us...

Topic Join the conversation!

We have always on configured for our entire user base and suddenly none of our users are able to connect to the SDP client. Is anyone else having this issue. This happens if they are connected and switch from a dock to wifi, and if they try to logon for the...

Topic Join the conversation!

Hello All!Recently, I was asked to get some additional information about Cato's ALG support for FTP.   This is what I was able to discover and realized we needed to share with everybody:For the Outbound traffic - Client on the LAN behind the Cato socket: AL...

Topic Join the conversation!