Protect Local Networks with Cato’s Application-Aware LAN Firewall

Hello and welcome to another video from Cato Networks. Every LAN requires full time protection.

Managing LAN security across multiple locations comes with two big challenges.

First, keeping up with hardware is a nightmare. Deploying, upgrading, and troubleshooting firewalls in multiple locations is costly and time consuming. And secondly, maintaining a centralized policy is complex. Keeping rules clean and consistent across multiple sites can be a constant struggle.

But what if you had LAN security that is simple, scalable, and hassle free? One that is an extension of your cloud access security. Cato Networks LAN next gen firewall, a native function of the Cato SASE cloud platform solves for this and more. The Cato Networks LAN next gen firewall is designed for simplicity.

Configuration is done on a site by site basis but it’s managed at the account levels. From the same single dashboard that manages internet and WAN firewalls, enabling LAN firewalls is just as simple. First, enable the feature.

Next, switch to the site firewall tab and enable LAN firewall for the site. No extra hardware, no complex setup. Next, let’s add the site we are deploying the LAN firewall rules to. For our case, it’ll be our AWS site. Then we will add the main container of the firewall rules. That will also establish the blacklist for the entire LAN network. Let’s switch to an FTP application and see it being blocked by the LAN firewall by default.

And you can see here that it times up pretty quickly because it is being blocked by the LAN firewall by default.

Back to the CMA.

And let’s add a single firewall rule that will allow the application to access the network for FTP transfer. We can switch back to the application now, and now we were able to connect and transfer files normally.

The Cato LAN Next Gen Firewall lets you secure your LAN easily from the same unified dashboard.

Next, let’s see how easy it is to leverage policies across multiple sites. This eliminates the need to manually configure each site or replicate settings across multiple boxes.

With Cato, simply add the site to the policy set, ensuring consistent security with just a few clicks. Here we have an additional site that needs to be added to the LAN firewall policy that we have here.

First, add the new site as a LAN firewall site, and then all we need to do is edit the policy in question to also include the new site. Save the changes, give that a moment or two to be pushed to the socket and done.

Cato extends the SASE footprint to now include the LAN, making it easier than ever to manage your global network from a single console with a single product. Be sure to check out our website for more information. Thanks for watching. We’ll see you next time.