Cato SASE Cloud

Cato SASE Cloud with SSE 360

Cato optimally and securely connects all enterprise locations, users, applications, and clouds, into a global and secure, cloud-native service. Cato can be gradually deployed to replace security point solutions and legacy network services. ​

Remote Access
Cato SASE Cloud provides users with zero trust network access (SDP/ZTNA) to on-premises and cloud applications using laptops, tablets, and smartphones. With a Cato Client or Clientless browser access, users securely connect to the nearest Cato PoP using strong Multi-Factor Authentication. Traffic flows only to applications authorized for the users based on identity, access policy, and user context. Throughout the session, traffic is fully inspected by Cato’s security stack to prevent malware propagation from compromised endpoints.

Edge SD-WAN
The Cato Socket SD-WAN device connects a physical location to the nearest Cato PoP via one or more last-mile connections. Customers can choose any mix of fiber, cable, xDSL, and 4G/LTE connections.

The Socket applies multiple traffic management capabilities such as active-active link usage, application- and user-aware QoS prioritization, dynamic path selection to work around link blackouts and brownouts, and packet duplication to overcome packet loss.

The Socket can also route site-to-site traffic over MPLS and the Internet to address regional and application-specific requirements.

Global Private Backbone
Cato SASE Cloud runs on a private global backbone of 75+ PoPs connected via multiple SLA-backed network providers. The PoPs software continuously monitors the providers for latency, packet loss, and jitter to determine, in real time, the best route for every packet.

Cato’s backbone design delivers end-to-end route optimization for WAN and cloud traffic, and a self-healing architecture for maximum service uptime. Our customers experience connectivity that is superior to the unpredictable public Internet and more affordable than global MPLS  and other legacy backbones.

Multi-cloud / Hybrid-cloud​
Cato integrates with major cloud providers, such as Amazon AWS, Microsoft Azure, and Google Cloud with secure IPSec tunnels or a Cato vSocket virtual appliance. Deployment is fast and simple and connecting a cloud data center to Cato takes minutes. All traffic to and from the cloud DC is subject to full security inspection by Cato’s built-in security stack, SSE 360, and is optimally routed from the edge to the cloud providers. With Cato, customers can eliminate the need for premium clouds connectivity solutions such as AWS DirectConnect and Microsoft Azure ExpressRoute

SaaS optimization​
Cato optimally routes traffic to public cloud applications, such as Office 365, Salesforce, Box, UCaaS, and Cloud ERP, from the enterprise edge to the doorstep of the cloud application’s data center. Cato accelerates end-to-end throughput up to 20x, boosting application performance for bandwidth-intensive operations like file upload and download.

All traffic and files exchanged with the cloud application are fully inspected by Cato’s security stack, SSE 360, to protect users from threats, attacks, and data loss.

Cato Management Application
Cato provides a cloud-based and self-service management application to control the entire service. It includes full network and security policy configuration, and detailed analytics on network traffic and security events.

Self-service management is a unique advantage of Cato over legacy-managed network service providers that require customers to submit tickets for any change to the network. If needed, Cato and its partners offer managed service options. In all cases, Cato maintains the underlying platform so customers do not need to upgrade, patch, or otherwise maintain the Cato SASE Cloud.