Cato Networks Master Service Agreement
We have updated our Master Service Agreement. If you are a new Customer, then this Master Service Agreement will be effective as of January 1st 2021. If you are an existing Customer, please note that this constitutes a notice of change and that this updated Master Service Agreement shall be applied to your Cato Networks Solution upon any renewal, upgrade, or additional Solution subscribed for after January 1st 2021.
IMPORTANT INFORMATION – PLEASE READ THIS CATO SOLUTIONS’ MASTER SERVICE AGREEMENT (“MSA” OR “AGREEMENT”) CAREFULLY BEFORE OPENING YOUR ACCOUNT AND/OR BEFORE DOWNLOADING OR INSTALLING THE SOLUTIONS (DEFINED BELOW). THIS AGREEMENT CONSISTS OF THE TERMS AND CONDITIONS WHICH GOVERN YOUR (“YOU” OR “CUSTOMER“), ACCESS TO AND USE OF CATO’S SOLUTIONS AND CONSTITUTES A BINDING AGREEMENT BETWEEN YOU AND CATO. BY CREATING AN ACCOUNT WITH CATO AND/OR USING THE SOLUTIONS (IN WHOLE OR IN PART) IN ANY WAY OR MANNER, YOU AGREE THAT YOU ARE BOUND BY THIS AGREEMENT.
IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT, YOU SHOULD NOT OPEN AN ACCOUNT WITH CATO AND IMMEDIATELY AVOID THE USE OF THE SOLUTIONS AND RETURN THEM TO CATO.
Cato and Customer hereby agree as follows:
shall mean and include any entity or association controlled by, controlling or under common control of a party hereto. For purposes of this definition, the term “control” shall mean the power to manage or direct the affairs of the person or entity in question, whether by ownership of voting securities, by contract or otherwise.
1.2. “Authorized User”
shall mean any employee, contractor, representative, or other person acting on Customer’s behalf who is authorized by Customer to use the Solution and who has been supplied with access to the Solution by either Customer or Cato, at Customer’s written request.
1.3. “Cato’s Network”
shall mean the network inside of Cato border routers;
shall mean any of the following Cato entities identified in the Order:
|Cato Contracting Party||Mailing Address|
|Cato Networks Inc.||3031 Tisch Way, 110 Plaza West
San Jose, California, 95128
|Cato Networks (Singapore) Pte. Ltd||25 International Business Park #02-53 German Centre, Singapore, 609916|
|Cato Networks (Australia) Pty Ltd.||Suite 2204 Level22 520 Oxford Street BONDI JUNCTION NSW 2022|
|Cato Networks (Japan) KK||New Tower 11F, 2-11-7, Akasaka, Minato-ku, Tokyo|
|Cato Networks (UK) Limited||37 Broadhurst Gardens, London, NW6 3QT United Kingdom|
|Cato Networks (EU) B.V.||De cuserstraat 89, 1081 CN Amsterdam.|
|Cato Networks Ltd.||Derech Menachem Begin 121,
Tel Aviv, Israel
1.5. “Confidential Information”
shall mean all information (however recorded, preserved or disclosed) disclosed by one party (the “Disclosing Party”) or its employees, officers or representatives (together, the “Representatives”) to the other party (the “Recipient”) and that party’s Representatives:
(a) in connection with the Service or Solutions;
(b) the existence and terms of this MSA and the Order;
(c) any information that would be regarded as confidential by a reasonable business person relating to the business, affairs, customers, clients, suppliers, plans, intentions, specifications, formulas, prototypes, computer programs (source and/or object code) and any and all records, data, ideas, methods, techniques, processes and projections, plans, marketing information, materials, financial statements, memoranda, analyses, notes, legal documents and other data, documents and information (in whatever form), as well as improvements, patents (whether pending or duly registered) and any know-how related thereto, relating to the Disclosing Party and information learned by the Receiving Party from the Disclosing Party through the inspection of the Disclosing Party’s property (including notes, analyses or other documents prepared by, or on behalf of, the receiving party which contain the information furnished to the receiving party pursuant hereto), that relates to Disclosing Party’s products, designs, business plans, business opportunities, finances, research, development, know-how, personnel, or market opportunities of the Disclosing Party or of any Affiliate of the Disclosing Party and the operations, processes, product information, know-how, designs, trade secrets or software of the Disclosing Party or of any Affiliate of the Disclosing Party;
but not including any information that:
a) is or becomes generally available to the public other than as a result of its disclosure by the Recipient or its Representatives in breach of this agreement or of any other undertaking of confidentiality addressed to the party to whom the information relates; or
b) was lawfully in the possession of the Recipient before the information was disclosed to it by the Disclosing Party; or
c) the parties agree in writing is not confidential or may be disclosed.
In addition to the above and for the avoidance of doubt “Confidential Information” of Cato shall include but not be limited to, all information and know-how in respect of the Solutions and/or that are transferred to, or disclosed to Customer.
1.6. “Customer Data”
shall mean any information provided by Customer for data processing via Cato Services, as further defined in Cato’s Data Processing and Privacy Agreement available at: https://www.catonetworks.com/cato-networks-data-processing-and-privacy-agreement/
shall mean a third party that distributes the Cato Solutions through Partners to the Customer
1.8. “Force Majeure Event”
shall mean: (a) fire, flood, earthquake, elements of nature or act of God; (b) riot, civil disorder, rebellion or revolution; or (c) other matters outside of the reasonable control of Cato.
shall mean all hardware sockets delivered to Customer by Cato and/or its approved distributors or resellers pursuant to this MSA, if any.
1.10. “Intellectual Property Rights”
shall mean any and all worldwide, whether registered or not (a) patents, patent applications and patent rights; (b) rights associated with works of authorship, including copyrights, copyrights applications, copyrights restrictions, mask work rights, mask work applications and mask work registrations; (c) rights relating to the protection of trade secrets and confidential information; (d) trademarks, trade names, service marks, logos, trade dress, goodwill and domains (“Trademarks”); (e) rights analogous to those set forth herein and any other proprietary rights relating to intangible property; and (f) divisions, continuations, renewals, reissues and extensions of the foregoing (as applicable) now existing or hereafter filed, issued, or acquired.
1.11. “Order” or “Order Form”
shall mean any of Cato’s service order forms, or if the Solution is subscribed through a Partner then the service order forms of Cato’s authorized Partners, with respect to subscription of the Solution. The term “Order” also includes any applicable renewal, upgrade or upsell you make to increase or upgrade your Scope of Use (as hereinafter defined).
shall mean a reseller or a managed service provider who either resells directly to, or manages the Solution to/for, as applicable, the Customer.
shall mean (i) the Cato proprietary software as a service (SaaS), known as the Cato Cloud, (ii) any software and/or services that are delivered to Customer under the Order on behalf of Cato or any software that is provided with the Hardware; (iii) all revisions, corrections, modifications, enhancements, improvements and/or updates and upgrades to the foregoing, and (iv) all related documentation included in the package and/or placed on Cato’s World Wide Web site.
shall mean the Service and Hardware.
1.15. “Subscription Term”
shall mean the term of the Solution subscribed for under the Order that shall commence as of the start date set forth in the applicable Order and shall continue for the length of time referenced in the applicable Order unless earlier terminated in accordance with the terms of this MSA.
2.1. Subject to the terms and conditions of this Agreement (including payment of all applicable subscription fees) and during the Subscription Term, the Solution shall be available to Customer, to be used by Customer’s and its Affiliates’ users solely for internal use of Customer or such Affiliate (as the case may be) during the Subscription Term. For this purpose an account will be enabled in order for the Customer to access the Service (“Account”).
2.2. The terms of this Agreement apply to the Solution, as well as to updates, and upgrades subsequently provided by Cato or its Distributors or Partners, as applicable, to Customer for Cato Solutions. Cato shall host the Service and may update the functionality, user interface, usability and other user documentation, training and educational information of, relating to the Solution, from time to time, in its sole discretion and in accordance with this Agreement as part of its ongoing mission to improve the Solution and customers’ use of the Solution.
3.1. Your Order will specify your authorized scope of use for the Solution, which may include: (a) the bandwidth volume per site; (b) the number of mobile users; and (c) other restrictions (as applicable, the “Scope of Use”).
3.2. This Agreement applies whether you subscribe for the Solution directly from Cato or through Cato’s authorized Partners. Cato is not bound by any obligations to you other than what Cato has explicitly agreed to in this Agreement.
4. TRUE UP
During the Subscription Term, Customer cannot exceed its Scope of Use, as such Scope of Use was defined in the original Order, and Cato shall be committed to provide only the purchased Scope of Use per site. Should for any reason Customer’s needs exceed this Scope of Use, additional Scope of Use must be purchased for the remainder of the applicable Subscription Term. If Customer attempts to exceed the bandwidth volume per site and/or the number of mobile users, as such capacity was defined in the applicable Order, Customer shall not be granted the additional capacity and shall not be charged for any additional capacity unless Customer agrees to purchase such additional capacity through an Order.
5. CUSTOMER OBLIGATIONS AND LIMITATIONS
5.1. Customer will designate the Authorized Users, including the creation of usernames and passwords for such Authorized Users. Customer is solely responsible for maintaining the status of its Authorized Users and for all the activity of such Authorized Users and their use of the Account. Customer and its Authorized Users will maintain the confidentiality of all usernames, passwords, access, and account information under their control. Except to the extent caused by Cato’s breach of this Agreement, including its obligations under Section 9 (Confidential Information), Cato is not responsible for unauthorized access to the Account. Customer will contact Cato promptly if (i) Account information is lost, stolen, or disclosed to an unauthorized person; (ii) Customer reasonably believes that the Account has been compromised, including any unauthorized access, use, or disclosure of account information; or (iii) any other breach of security in relation to its passwords, usernames, access information, or Cato’s Solution that may have occurred or is reasonably likely to occur.
5.2. Customer shall not (and shall not allow any third party to) (i) copy, reproduce, sell, license (or sub-license), lease, loan, assign, transfer, or pledge the Solutions or any part thereof, or otherwise permit any third party to do any of the foregoing; (ii) modify, copy, display, disassemble, decompile, reverse engineer, revise or enhance or republish or create any derivative works or otherwise merge or utilize all or any part of the Solutions with or into any third party materials or components or attempt to access or discover the Service’s source code; (iii) place the Solution onto a server so that it is accessible via a public network or use the Solution for timesharing or for service bureau purposes; (iv) ship, transfer, or export the Solution or any component thereof or use the Solution in any manner prohibited by law, including without limitation to, sell, distribute, export or download Solutions into (or to a national or resident of) Cuba, Iran, Iraq, Libya, North Korea, Sudan, Lebanon or Syria, or otherwise in violation of any export or import restrictions, laws or regulations of the U.S. or Israel or any foreign agency or authority. Customer agrees to the foregoing and warrants that it is not located in, under the control of, or a national or resident of any prohibited country or on any prohibited party list; (v) contest Cato’s Intellectual Property Rights to the Cato IPR; (vi) use the Service that is installed on or embedded or included in any Hardware on any server or hardware other than the Hardware as delivered by Cato or its Partner; (vii) remove or add any labels, notices or logos to the Solutions, (viii) perform any act or be responsible to any omission that is illegal, including, without limitation, those enforcing censorship, privacy, government authority restrictions, or by accessing any blocked services, or in Cato’s discretion otherwise jeopardizes, destabilizes, interrupts or encumbers the Solutions and/or Cato’s Network or their servers and/or has a detrimental impact on Cato and/or Cato IPR and/or Cato’s Network; (ix) transmit or upload any spam, viruses, spyware or other harmful, infringing, obscene, threatening, libelous, illegal, disruptive or destructive content, messages or files, or send or store worms, time bombs, Trojan horses or other harmful or malicious code, files, scripts, agents or programs; (x) access any Solution and/or its servers through or use with the Solutions any unauthorized means, services or tools, including, without limitation, any data mining, robots, or similar automated means or data gathering and extraction tools, including, without limitation, in order to extract for re-utilization of any parts of the Solutions; (xi) use the Solution for any purpose other than as permitted by this Agreement, including all Orders; (xii) directly or indirectly conduct any penetration testing (including to users’ systems, network and/or servers) through or using the Solutions and/or their respective connectivity or networks, unless (a) Customer performs such testing to their own systems and applications through no use of the Solution; (b) Customer notifies Cato about it 30 days in advance and in writing and (c) it is done solely as part of its legal and obligatory auditing processes to assure the operation of the Solution, or for its internal security verification requirements. Whether Customer has violated any of the limitations set forth in this Section 5.2 shall reside within Cato’s sole discretion. If Cato determines a violation has occurred, Cato shall notify Customer of the violation and Customer shall be required to cease the violation immediately. Cato may also determine in its sole discretion whether to suspend or block the Customer Account. Cato shall use such remedy if and when such violation represents an imminent threat to Cato’s Network or if so directed by a court of competent authority. In such cases Cato will: (i) suspend the Account only to the extent reasonably necessary to prevent any harm to Cato’s Network; (ii) use its reasonable efforts to promptly contact Customer and give Customer the opportunity to promptly change the configuration of its server(s) accordingly and/or work with Customer to promptly resolve the issues causing the suspension of the Account; and (iii) reinstate any suspended part of the Account immediately after any issue as above-mentioned has been resolved, provided if Cato determines that any such violation was willful or is unable to be adequately remedied, it may immediately terminate this Agreement and/or any impacted Order without penalty upon notice to Customer.
5.3. Customer is solely responsible for acquiring and maintaining all of the hardware, software and services necessary to access and make use of the Solutions, including paying all fees and other costs related to internet access. Customer shall use the Solutions in accordance with the Cato’s Solution documentation made available and/or provided by Cato, and as may be updated form time to time, and in compliance with the applicable operating instructions and all applicable laws and regulations and for no purpose other than as specifically authorized in the Solution documentation, including without limitation, Customer shall not use the Solution for the purpose of circumvention of government censorship, laws or regulations.
6. IP OWNERSHIP
6.1. Notwithstanding any other provision to the contrary, all Cato Confidential Information, Trademarks, Feedback (as defined below), the Service and the Intellectual Property Rights in the Hardware and all improvements, enhancements and derivatives thereof and all Intellectual Property Rights thereto (“Cato IPR“) are exclusively owned by Cato and/or its licensors. This MSA does not convey to the Customer any right, title or interest in the Cato IPR. Customer Confidential Information, Customer Trademarks, and other Customer proprietary information, including all Customer Data, shall be the sole property of Customer, and Cato shall only have such rights to use such information as expressly provided in this Agreement and to provide the Cato Solution.
6.2. Feedback from Customer regarding the Solutions and Services, their use or any suggested improvements, enhancements or derivatives (“Feedback”) is welcomed by Cato. Customer is not required to provide Feedback, however, to the extent that it does so, such Feedback shall not constitute Customer’s Confidential Information and Customer acknowledges that Cato may use such Feedback in any manner Cato sees fit, without payment of royalty or any other consideration.
7. PAYMENT AND TAXES
All fees, taxes and other charges in connection with the Cato Solution shall be as set forth on the applicable Order Form.
8. SERVICE LEVELS
Subject to Customer’s compliance with the terms of this Agreement Customer shall be provided with the Services at the levels set forth in the Schedule 1 attached hereto (“SLA”).
9. CONFIDENTIAL INFORMATION
9.1. The Recipient agrees and acknowledges that all Confidential Information it obtains from the Disclosing Party constitutes the confidential property of the Disclosing Party if it is identified as confidential at the time of disclosure or should be reasonably known by the Recipient to be Confidential Information due to the nature of the information disclosed and the circumstances surrounding the disclosure. The Cato Solutions, pricing, technical information and other code, data, business or financial information of any type (including, without limitation, Cato’s plans for new or enhanced products and services) provided by Cato will be deemed trade secret and Confidential Information of Cato without any marking or further designation.
9.2. The Receiving Party may use or make copies of the Confidential Information of the Disclosing Party only to the extent reasonably necessary for purposes of this Agreement. The sharing of Confidential Information hereunder shall be “as is” without warranty and conveys to the Receiving Party no rights in or to such Confidential Information. The Receiving Party will protect the confidentiality of the Disclosing Party’s Confidential Information in the same manner that it protects the confidentiality of its own similar information, but in no event using less than a reasonable standard of care. The Receiving Party will restrict access in the Confidential Information to those of its personnel (including such personnel employed by its Affiliates, contractors, agents and legal and financial professionals) and subcontractors engaged in the performance, management, receipt or use of the Solution under this Agreement, or otherwise necessary in connection with its performance of all obligations under this Agreement, provided that such parties are bound by obligations of confidentiality at least as restrictive as the terms of this Agreement.
9.3. Notwithstanding the above provisions of this Section 9, a party may disclose Confidential Information to the extent required by law, by any governmental or other regulatory authority, or by a court or other authority of competent jurisdiction provided that, to the extent it is legally permissible to do so if:
9.3.1. it gives the other party as much notice in writing of this disclosure as possible;
9.3.2. to the extent required to disclose, discloses only that portion of the Confidential Information legally required; and
9.3.3. where notice of disclosure is not prohibited by law, and is given in accordance with this Section 9, it provides reasonable cooperation upon the Disclosing Party’s request in either disputing the request or seeking an appropriate protective order, or similar relief, to the protect the disclosure of such Confidential Information.
9.4. Receiving Party will return or destroy the Disclosing Party’s Confidential Information in its possession upon request by the Disclosing Party, and upon the expiration or other termination of this Agreement, provided the Receiving Party may retain the Confidential Information of the Disclosing Party by agreement or if required under applicable law. Each party may retain copies of the other party’s Confidential Information required for compliance with its recordkeeping or quality assurance requirements (subject to the terms of this Agreement and all confidentiality requirements herein for the length of such retention).
9.5. The Recipient acknowledges that disclosure of Confidential Information would cause substantial harm to the Disclosing Party that could not be remedied by the payment of damages alone and therefore that upon any such disclosure by the Recipient will be entitled to appropriate equitable relief in addition to whatever remedies it might have at law.
10. TERM AND TERMINATION.
10.1. Term. The term of this Agreement shall be the Subscription Term set forth in the Order, but in no event shall be less than 12 (twelve) months, including all renewals thereof.
10.2. Co-Term. Should any Order Form be submitted by Customer for additional Services and/or Hardware (an “Additional Order”) during any existing Subscription Term or renewal Subscription Term, the initial Subscription Term of such Additional Order shall be pro-rated to concur with the existing Subscription Term or renewal Subscription Term so that the termination of all current Subscription Terms and all subsequent renewal Subscription Terms shall coincide to take effect on the same date. Applicable fees shall be pro-rated in accordance with any pro-rated Subscription Term or renewal Subscription Term.
10.3.1. If the Order is placed by Customer directly to Cato (rather than through a Partner), then the following shall apply:
10.3.1.1. Customer may terminate this MSA upon thirty (30) days prior written notice to Cato if Cato is in material breach of the MSA and fails to cure the breach within the said notice period, in which case Customer will be entitled to receive a pro-rata refund of all pre-paid fees attributable to any period post termination, if any, as Customer’s sole and exclusive remedy.
10.3.1.2. Cato may terminate this MSA upon thirty (30) days prior written notice to Customer if Customer is in material breach of the MSA and fails to cure the breach within the said notice period, subject to the foregoing. Cato may terminate the MSA with written notice: (i) upon Customer’s failure to comply with its obligations under Section 5; (ii) if Customer attempts to transfer or assign any of its rights, liabilities or obligations under this MSA contrary to the provisions of this MSA; (iii) non-payment of the applicable fees to Cato after a delay of more than seven (7) days ; (iv) Cato reasonably believes it is necessary to do so to comply with any law or an order, instruction or request of government, emergency services or other competent authority; or (v) a Force Majeure Event occurs which materially affects Cato’s ability to provide the Service.
10.3.2. If the Order is placed by Customer to Cato’s Partner, the following shall apply:
10.3.2.1. Notwithstanding any termination rights set forth in the Order between the Customer and the Partner, Cato may terminate the provision of the Services provided to Customer upon thirty (30) days prior written notice to Partner if Customer is in material breach of any of the obligations hereunder;
10.3.2.2. Notwithstanding the foregoing, Cato may terminate the provision of the Services provided to Customer with written notice to Customer and Partner: (i) upon Customer’s failure to comply with its obligations under Section 5; ii) if Customer attempts to transfer or assign any of its rights, liabilities or obligations under this MSA contrary to the provisions of this MSA; (iii) non-payment of the applicable fees to Cato after a delay of more than seven (7) days (iv) Cato reasonably believes it is necessary to do so to comply with any law or an order, instruction or request of government, emergency services or other competent authority; or (v) a Force Majeure Event occurs which materially affects Cato’s ability to provide the Service.
10.3.3. Licensed local telecommunication suppliers will be used to provide portion of the Services in China, where Cato is not licensed to provide such services and such portion of the Services will be part of our global Network. In the event of regulatory changes in China affecting the local providers ability to provide the Service, Cato will be entitled to terminate the applicable Services, without any further liability, and will transition Customer to another alternative local provider, under such provider’s terms.
10.4. Effects of Termination. Upon termination or expiration of this MSA Customer shall cease use of the Solutions and immediately return to Cato all Confidential Information and Cato IPR in any media and shall, to the extent applicable, erase all copies of the Service. Notwithstanding the termination or expiration of this MSA, Sections 6, 9, 10.3.3, 11, 12, 13 , and 14 shall survive and remain in effect in perpetuity.
11. LIMITATIONS OF LIABILITY
NEITHER CUSTOMER NOR CATO NOR CATO’S AFFILIATES, LICENSORS, SUPPLIERS, REPRESENTATIVES OR DISTRIBUTORS OR PARTNERS OR SHAREHOLDERS, MANAGERS, DIRECTORS, OFFICERS, AFFILIATES AND EMPLOYEES, RESPECTIVELY, SHALL BE LIABLE UNDER THIS AGREEMENT UNDER ANY LEGAL THEORY WHETHER IN CONTRACT, TORT OR OTHERWISE, FOR ANY INCIDENTAL, CONSEQUENTIAL, INDIRECT, SPECIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING DAMAGES FOR LOSS OF BUSINESS PROFITS, BUSINESS INTERRUPTION, LOSS OF INFORMATION, LOSS OF DATA INCLUDING ARISING OUT OF THE USE OF OR INABILITY TO USE THE SOLUTION OR OTHER PECUNIARY LOSS EVEN IF THE OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, PROVIDED, HOWEVER, THAT THE FOREGOING LIMITATION ON LIABILITY SHALL NOT APPLY TO CUSTOMER’S LIABILITY FOR FAILURE TO PAY ALL FEES UNDER EACH APPLICABLE ORDER.
THE SOLE LIABILITY OF CATO, IT’S AFFILIATE’S, AND LICENSORS, WHETHER IN CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY IN TORT, BY STATUTE OR OTHERWISE, FOR ANY AND ALL CLAIMS IN ANY MANNER RELATED TO THIS AGREEMENT, WILL BE THE PAYMENT OF DIRECT DAMAGES NOT TO EXCEED IN THE AGGREGATE THE TOTAL SUBSCRIPTION FEES PAID BY CUSTOMER TO CATO FOR THE SOLUTION DURING THE TWELVE (12) MONTHS PRECEDING THE EVENT THAT GAVE RISE TO THE CLAIM. NOTWITHSTANDING THE FOREGOING OR ANYTHING TO THE CONTRARY IN THIS AGREEMENT OR AN ORDER, IF CUSTOMER HAS PURCHASED THE CATO SOLUTION THROUGH A PARTNER, CUSTOMER SHALL LOOK EXCLUSIVELY TO THE PARTNER FOR ANY RELIEF RELATING TO THE SERVICES OR VIOLATION OR BREACH OF THIS MSA.
12. DISCLAIMER OF WARRANTY
CATO MAKES NO WARRANTY REGARDING THE SOLUTION AND HEREBY DISCLAIMS ALL WARRANTIES, EXPRESS AND IMPLIED, INCLUDING ANY IMPLIED WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, INFORMATIONAL CONTENT, SYSTEMS INTEGRATION, INTERFERENCE WITH ENJOYMENT OR OTHERWISE. CATO DOES NOT WARRANT THAT (I) THE SOLUTION WILL BE UNINTERRUPTED OR ERROR-FREE, OR (II) THE SOLUTION WILL PERFORM IN ACCORDANCE WITH CUSTOMER’S EXPECTATIONS OR ACHIEVE CUSTOMER’S DESIRED RESULT.
THE SOLUTION IS NOT DESIGNED FOR USE WITH CRITICAL OR LIFE SAVING INFRASTRUCTURES, SYSTEMS THAT CONTAIN OR PROTECT AGAINST DANGEROUS OR HAZARDOUS MATERIALS OR FORCES, NATIONAL SECURITY PURPOSES OR NUCLEAR, CHEMICAL, OR BIOLOGICAL WEAPONS.
CUSTOMER’S SOLE AND EXCLUSIVE REMEDY IN CONNECTION WITH ITS USE OF THE SOLUTION HEREUNDER SHALL BE THOSE REMEDIES SET FORTH IN THE SLA ATTACHED AS SCHEDULE 1 HERETO.
13. GOVERNING LAW & JURISDICTION
When Customer subscribes for the Cato Solution directly from Cato, this MSA is governed by the laws and courts as set forth in the following table:
|Cato Contracting Party||Governing Laws and Courts|
|Cato Networks Inc.||The laws of the State of New York without regard to conflict of laws provisions thereof. The courts of New York, New York shall have exclusive jurisdiction and venue to adjudicate any dispute arising out of this MSA and both parties hereby irrevocably submit to the exclusive jurisdiction of those courts.|
|Cato Networks (Singapore) Pte. Ltd
Cato Networks (Japan) KK
|The laws of Singapore without regard to conflict of law provisions thereof. The courts of Singapore, shall have exclusive jurisdiction and venue to adjudicate any dispute rising out of this MSA and both parties hereby irrevocably submit to the exclusive jurisdiction of those courts.|
|Cato Networks (UK) Limited
Cato Networks (Australia) Pty Ltd.
|The laws of England and Wales without regard to conflict of law provisions thereof. The courts of London, United Kingdom shall have exclusive jurisdiction and venue to adjudicate any dispute arising out of this MSA and both parties hereby irrevocably submit to the exclusive jurisdiction of those courts.|
|Cato Networks (EU) B.V.||The laws of the Netherlands without regard to conflict of law provisions thereof. The courts of Amsterdam, the Netherlands shall have exclusive jurisdiction and venue to adjudicate any dispute arising out of this MSA and both parties hereby irrevocably submit to the exclusive jurisdiction of those courts.|
|Cato Networks Ltd.||The laws of the State of Israel without regard to conflict of law provisions thereof. The courts of Tel Aviv, Israel shall have exclusive jurisdiction and venue to adjudicate any dispute arising out of this MSA and both parties hereby irrevocably submit to the exclusive jurisdiction of those courts.|
When Customer subscribes to the Cato Solution from any of Cato’s Partners, the laws of the State of New York shall apply to this MSA, without regard to its conflict of law’s provisions. The courts located in New York, NY shall have exclusive jurisdiction and venue to adjudicate any valid dispute arising out of this MSA and both parties hereby irrevocably submit to the exclusive jurisdiction of those courts. THE PARTIES SPECIFICALLY WAIVE ANY RIGHT TO TRIAL BY JURY IN ANY COURT WITH RESPECT TO ANY CONTRACTUAL, TORTIOUS, OR STATUTORY CLAIM, COUNTERCLAIM, OR CROSS-CLAIM AGAINST THE OTHER ARISING OUT OF OR CONNECTED IN ANY WAY TO THIS AGREEMENT.
14.1. Entire Agreement. This Agreement is the entire agreement between the parties regarding the subject matter of this Agreement. This Agreement supersedes all prior or contemporaneous representations, understandings, agreements, or communications whether written or verbal, regarding the subject matter of this Agreement. Unless otherwise expressly provided, no provisions of this MSA are intended or shall be construed to confer upon or give to any person or entity other than Customer and Cato, its Affiliates and successors or assignees any rights, remedies or other benefits under or by reason of the MSA; The terms and conditions of this MSA shall apply to all Order Form(s), orders and any additional or inconsistent terms appearing on purchase orders generated by Customer, if applicable, are not incorporated into this MSA and are not otherwise binding on Cato.
14.2. Changes to the Solution. Cato may make necessary technical or other changes to the Solution and the provision of the Solution on an as-needed basis. Where any such change would adversely and materially affect Customer, Cato shall notify Customer, through Cato management system of the Solution to Customer’s administrator, and if such change is unique to the Customer via a ticket made available to Customer’s administrator of the Solution on the Customer Portal (the details of the Customer administrator should be inserted by the Customer in Cato management system and should remain subscribed for Cato’s notifications) and the change shall only take effect upon renewal of Customer’s then current Subscription Term of the Solution or upgrade, or additional Solution subscribed for from Cato.
14.3. Assignment. This Agreement will bind and inure to the benefit of each party’s permitted successors and assigns. Neither this MSA, nor any rights or obligations under this MSA, is assignable by Customer, without the prior written consent by Cato. Cato may assign this Agreement to any party without the consent of Customer. Any unauthorized assignment will be void and of no force or effect;
14.4. Validity. In case any provision of this MSA shall be invalid, illegal or unenforceable, the validity, legality and enforceability of the remaining provisions shall not in any way be affected or impaired thereby
14.5. Exercise of Rights. No failure or delay on the part of Cato or its Partners hereto in exercising any right, power or remedy shall operate as a waiver thereof, any waiver granted by Cato and/or a Partner, hereunder must be explicit and in writing and shall be valid only in the specific instance in which given;
14.6. Notices. Any notice hereunder will be in writing to the notice address set forth in the Order Form: (i) upon receipt if by personal delivery; (ii) upon receipt if sent by certified or registered mail (return receipt requested); (iii) two (2) days after it is sent if by overnight delivery by a major commercial delivery service; or (iv) upon written approval of receipt by the receiving party if sent by email. Either party may, by like notice, specify or change an address to which notices and communications shall thereafter be sent.;
Schedule 1 of the Master Service Agreement (the “Agreement”)
Service Level Agreement (“SLA”)
This SLA is an integral part of the Agreement and subject to the terms set forth therein. Defined terms shall have the meaning ascribed to them in the Agreement, unless defined otherwise herein. The SLA provides certain rights and remedies in the event that an Authorized User experiences service interruption as a result of failure of Cato infrastructure.
2. TERM DEFINITIONS
For the purpose of this SLA, the terms in bold are defined as follows:
2.1. “Affected Site(s)” shall mean the physical or virtual specific Site that is connected to the Services, in which the relevant Downtime occurred;
2.2. “Available” or “Availability” shall mean the time during which a Site is active, enabled and has reasonable access to the Service provided by Cato, subject to the exclusions defined in Downtime Minutes below;
2.3. “Cato Support Portal” shall mean https://support.catonetworks.com, (account registration is required in order for the Customer to have a support account);
2.4. “Downtime” or “Downtime Minutes” shall mean the total number of minutes that the Service is not Available, and a Site cannot access the Service. The calculation of downtime minutes excludes time that a Site is unable to access the Services due to any of the following: (a) Maintenance; (b) Site’s own Internet service provider failure; (c) any failure of the Hardware (d) Force Majeure event; (e) Any systemic Internet failures; (f) Any failure in the Site’s own hardware, software or network connection; (g) Site’s bandwidth restrictions; (h) Customer’s acts or omissions; and/or (i) Anything outside of the direct control of Cato;
2.5. “Emergency Maintenance” shall mean maintenance required in order to ensure the Availability, reliability or security level of the service due to unforeseen circumstances;
2.6. “Maintenance” shall mean Routine Maintenance and Emergency Maintenance;
2.7. “Maintenance Time” shall mean the time period during which the Service may not be Available each month so that Cato can perform Routine Maintenance;
2.8. “Problem Response Time” shall mean the time between the receipt of all the information required by Cato regarding a Service Event via Cato Support Portal, and the initial response by Cato in respect thereto;
2.9. “Routine Maintenance” shall mean structured as-needed maintenance intended to prevent problems and update the network services, including without limitation operating system patches, antivirus and malware prevention updates, policy revisions, firewall updates, implementation of new features, bug fixes, and the like. Routine Maintenance is intended to have minimal impact on the Service;
2.10. “Service Event” shall mean an event of disruption to the Service, confirmed as such in writing by Cato, based on and provided that, all information from the Customer regarding such an event was provided by the Customer through Cato Support Portal, which information shall at a minimum include: account name and number, full description of the event and details about the Site where such event has occurred, business impact description and contact info;
2.11. “Site” shall mean the applicable office-headquarters, branch-office, on-premise-datacenter, cloud-datacenter.
2.12. “SLA Metric” or “Service Level” shall mean the overall Service availability metric of 99.999%, measured by Cato on a monthly basis and made available to the Customer at: https://status.catonetworks.com/;
2.13. “Total Monthly Minutes” shall mean the number of days in the month multiplied by 1,440 minutes per day;
3.1. During the term of the Agreement and this SLA, Cato shall perform Routine Maintenance activity as aforesaid, via Cato Support Portal. Cato shall make reasonable efforts to: (i) notify Customer, via Cato Support Portal, forty-eight (48) hours in advance of any Routine Maintenance, such notification to include the time and date of such Routine Maintenance, and (ii) synchronize maintenance windows outside of your working hours. No notice shall be required for Routine Maintenance conducted on Sundays, between 2PM UTC and 6 PM UTC.
3.2. Customer hereby understands and agrees that there may be instances where Cato needs to interrupt the Services without notice, in its sole discretion, in case of Emergency Maintenance.
3.3. Emergency Maintenance will only be deemed as Downtime for the purpose of section 8.1 below, if, and only if, Cato does not provide at least six (6) hours advance notice of an Emergency Maintenance;
4. Problem Response Time
4.1. Customer is responsible to first verify if a broader service disruption has already been reported at: https://status.catonetworks.com/. In case a service disruption has already been reported which is applicable to the Customer’s problem, Cato shall not be obligated to respond to a support ticket, as the issue shall be considered as already being addressed, and progress updates should be provided via https://status.catonetworks.com/.
4.2. Excluding the circumstances set forth in section 4.1 above, Cato shall use a reasonable method to provide Customer with a progress update, once Customer opened a support ticket through Cato Support Portal, per incident, which will vary upon the degrees defined in the table below.
The Problem Response Time Table:
|Categorization||Criteria||Initial Response Time||Status Update|
|Level 1 – Critical||Outage of Multiple PoP locations. The customer cannot connect to Cato Network services at all||2 hours||Every 2 hours|
|Level 2 – High||Outage of a single Pop Location. The Customer can connect to a different PoP; and/or
Outage of Cato Management Application
|4 hours||Every 1 business day|
|Level 3 – Low||Other issues that does not prevent the Customer from accessing a significate feature of the service||1 business day||In 4 business days|
5. AFFECTED SITE(S)
The Services are provided in a multi-POPs architecture where the access of the Customer may be extended across numerous POPs. Customer may obtain remedy, as set forth in this SLA, only for the Affected Site experiencing the Downtime, exceeding the SLA Metrics.
6. PRE-REQUISITE REQUIREMENTS
6.1. The Service includes an interface that constitutes the web-based administration application (“Web-Based Administration Application”) which is provided to the Customer. The Web-Based Administration Application enables the Services and the Customer can manage its own account and Services through the Web-Based Administration Application via Authorized Users. The Customer should use discretion when granting internal administrative privileges to the Web-Based Administration Application. Cato is not responsible for Downtime related to negligence in the Web-Based Administration Application and is unable to provide credits due to negligence in the Web-based Administration Application.
Example of negligence are: Configuration changes;; Services disabled/deleted in error.
Cato uses a proprietary system to measure whether the Services are Available, and the Customer agrees that this system will be the sole basis for resolution of any dispute that may arise between the Customer and Cato regarding this SLA. Customer may present to Cato different measurement of the Availability of the Services based on internal systems of Customer, but in the event of a contradiction between Cato’s measurements and Customer’s measurements, measurements based on Cato’s proprietary system shall prevail.
8. SERVICE LEVEL CREDIT
8.1. Availability is calculated based on the following formula:
A = (T – M – D) / (T – M) x 100%
A = Availability
T = Total Monthly Minutes
M = Maintenance Time
D = Downtime
|Availability||Credit Amount of Monthly Fee for Affected Site(s)|
|> 97.9% but < 99.999%||5%|
|> 96.9% but < 97.9%||7%|
8.2. The Service Level Credits set forth above, are the Customer’s sole remedy in connection with Service Levels and this SLA. To qualify and request such remedy all of the pre-requisite requirements set forth above, and the following pre-conditions must be met by the Customer, absent of which, Customer shall not be entitled to any remedy:
8.2.1. Customer account must be in good standing with all invoices paid and up to date;
8.2.2. There must be a support ticket documenting the event created within 24 hours of the Service Event (the “Initial Support Ticket”);
8.2.3. The Customer must notify Cato by opening an additional support ticket, within five (5) business days of opening the Initial Support Ticket and provide a claim notice (“Claim Notice”);
8.2.4. The Claim Notice must include the following:
188.8.131.52. Subject of the ticket must be: “Claim Notice – <account-name>” (Customer account name as registered with Cato must be listed in place of ‘<account-name>’);
184.108.40.206. List the type of Service that was affected;
220.127.116.11. List the date and time on which the Downtime began and the date and time on which the Downtime ended;
18.104.22.168. List the Sites that were affected by Downtime;
22.214.171.124. Ticket number of the documented Service Event.
8.3. Cato will confirm receipt of the information provided in the Claim Notice within five (5) business days of receipt of the Claim Notice. If Cato cannot confirm the Downtime Minutes, then the Customer and Cato agree to refer the matter to executives at each company for resolution.
The sole and exclusive remedy to which the Customer may be entitled for failure to provide the level of Availability set forth in this SLA as per the Service Level Metric, is the amount of Service Level Credits set forth above for the affected Service Level Metric and the Affected Sites for the affected month.
8.4. The SLA credit will be reflected in the Cato’s invoice to the Customer following Cato confirmation that the Customer is eligible for credits. SLA credits can only be applied to accounts that are in good standing with all invoices paid and up to date.
HARDWARE SUPPORT AND MAINTENANCE SERVICES.
In the event of failure of a Hardware component, a Customer designated contact will contact Cato for assistance in troubleshooting the problem. Cato will diagnose the problem and attempt to resolve the problem with the Customer designated contact over the phone.
If after troubleshooting, Cato and Customer determine that the failure is caused by a defective Hardware provided under the Agreement, Cato will initiate hardware exchange or repair (“Return/Exchange”) of the defective Hardware component. Hardware exchange may be refurbished or renewed. Cato will provide a return material authorization number (an “RMA Number”) to the Customer and ship a repaired Hardware component or replacement Hardware component to the Customer or its designee as set forth in more detail below. Cato will initiate an advance exchange (“Advance Exchange”) of the defective Hardware component with a replacement Hardware component (prior to receiving the defective Appliance), but only after issuing the RMA number to the Customer. Shipping will be by air freight, priority service to the Customer or its designee unless Customer requests other service, and agreed by Cato. The replacement Hardware component will ship from Cato within 1 business day of Cato and the Customer’s determination that an advanced exchange is appropriate. Cato will include with the replacement Hardware component instructions on how to return the defective Hardware component, which must be returned within ten (10) calendar days, complete with such Hardware component’s original packaging and documentation, to Cato freight collect with the RMA number displayed on the outside of the shipping container. Cato may provide a prepaid shipping label to facilitate the return of the Hardware component. All inbound and outbound Hardware component shipping charges for Hardware component hereunder will be paid by Cato. Cato will provide phone and email support for configuration and installation of the Hardware component.
The aforesaid Hardware support and maintenance services are subject to Customer’s fulfillment of its obligations pursuant to the Agreement (e.g. payment of fees).
During the Subscription Term, Cato may update and replace the Hardware by providing 90 days written notice to Customer, and Customer shall be obligated to replace his then current Hardware within 30 days of receiving the new Hardware. Any replacement of Hardware shall be in accordance with the Return/Exchange process described above.