Cato Networks logo

Cato SASE Cloud

Cato Networks · Cloud and Network Security

Networking and security for sites, cloud and remote users delivered as one cloud service.

Request a consultationCompare products
Draft summary. This page summarises what the vendor's product family is generally known for. Each claim is pending confirmation against vendor documentation.

Overview

Cato replaces separate branch routers, firewalls and VPN concentrators with one service. Sites, cloud resources and remote users connect to the nearest point of presence, where traffic is inspected once against a common set of security policies.

Security functions include firewall as a service, secure web gateway, zero trust network access and threat prevention. Traffic travels over the vendor's private backbone, and the whole estate is managed from one console.

Primary capability
Unified SD-WAN and cloud-delivered network security (SASE)
Deployment models
SaaSPending vendor confirmation
Management effort
ModeratePending vendor confirmation

Customer challenges and business value

  • Branch infrastructure is costly to run

    Each site has its own router, firewall and licences to patch, which multiplies effort and contract renewals.

  • VPN does not suit a cloud-first workforce

    Backhauling remote traffic to a data centre slows applications and gives users broad network access.

  • Security policy differs by location

    Rules at sites, in the cloud and for roaming users drift apart and are hard to audit.

What this helps you achieve

  • One service and console for branch, cloud and remote access
  • Consistent security policy everywhere
  • Less hardware to deploy, patch and renew

Key capabilities

  • Software-defined WAN with a private global backbonePending vendor confirmation
  • Firewall as a service and network segmentationPending vendor confirmation
  • Secure web gateway and threat preventionPending vendor confirmation
  • Zero trust network access for remote usersPending vendor confirmation
  • Cloud access and data protection controlsPending vendor confirmation
  • Single management console with centralised loggingPending vendor confirmation

Technical architecture and deployment

Where the product sits in a typical security architecture, and what it connects to.

Data sources

  • Branch offices
  • Remote users
  • Cloud and data centre

This product

Cato SASE Cloud

Outputs and actions

  • Unified policy
  • Traffic logs to SIEM
  • Central management
Generic placement for this category. Actual data sources and integrations depend on the product and your environment.

Integration ecosystem

Categories of systems this type of product commonly connects to. Specific connectors and versions are confirmed with the vendor.

  • Identity providers and single sign-onPending vendor confirmation
  • Public cloud networksPending vendor confirmation
  • SIEM and log platformsPending vendor confirmation
  • Endpoint securityPending vendor confirmation

Common use cases

  • Replacing branch routers and firewalls with one cloud service
  • Secure access for remote and hybrid staff
  • Connecting multiple clouds and sites with consistent policy
  • Reducing dependence on traditional MPLS links

Frequently asked questions

How is SASE different from a VPN and firewall?

A VPN and firewall protect a network perimeter you operate. SASE moves networking and security into a cloud service that users, sites and clouds connect to, so policy follows them wherever they are.

Where does the information on this page come from?

This page is a draft summary of what the vendor's product family is generally known for. Capabilities, deployment models and integrations are marked as pending until they are checked against vendor documentation. Ask us for a confirmed scope for your environment.

Talk to an expert about Cato SASE Cloud

Share your environment and requirements. We will confirm product details with the vendor and help you decide.

Request a consultation