Products Extended SKU Description
Sites and Clouds
Site Bandwidth
Cato Site Bandwidth license represents an exact bandwidth allocation for a single SASE site. This license is required for sites using both the SD-WAN and SSE capabilities of the Cato SASE Cloud Platform. SASE sites are connected with a Cato Socket, a Cato vSocket, or a Cato Cloud Interconnect.
SSE Site Bandwidth
Cato SSE Site Bandwidth license represents an exact bandwidth allocation for a single SSE site. This license is required for sites using only the SSE capabilities of the Cato SASE Cloud Platform. SSE sites are connected with an IPsec tunnel from third-party appliances or cloud data centers.
Bandwidth Capacity Pool
Cato Bandwidth Capacity Pool license refers to aggregated SASE bandwidth, which can be divided and allocated among multiple sites in the same pricing group. This license is required for sites using SASE capabilities (SSE + SD-WAN) of the Cato SASE Cloud Platform. SASE sites are connected with a Cato Socket or a Cato vSocket. Cloud Interconnect does not qualify for Bandwidth Capacity Pool.
SSE Bandwidth Capacity Pool
Cato SSE Bandwidth Capacity Pool license refers to aggregated SSE bandwidth that can be divided and allocated among multiple sites in the same pricing group. This license is required for sites using only the SSE capabilities of the Cato SASE Cloud Platform. SSE sites are connected with an IPsec tunnel from third-party appliances or cloud data centers.
Security Add-Ons
Threat Prevention
Cato TP is a package of inline capabilities targeted to secure the enterprise in real-time against unknown, evasive, and known cyberattacks. The functionalities included are malware prevention, intrusion prevention (IPS), DNS security, threat intelligence, and AI/ML-based anti-phishing. It is licensed based on the sum of bandwidth and ZTNA users of the account.
Cloud Access Security Broker
Cato CASB provides detailed visibility and control over the enterprise’s cloud applications. Natively built into the Cato SASE Cloud platform, Cato CASB aids in overcoming shadow IT and enables risk-based and granular control of SaaS access and user actions. It is licensed based on the sum of bandwidth and ZTNA users.
Data Loss Prevention
Cato DLP allows enterprises to protect sensitive data against unintentional loss or malicious data exfiltration. Natively built into the Cato SASE Cloud platform, Cato DLP has full visibility of all traffic from all sources and destinations. DLP mandates CASB and is licensed based on the sum of bandwidth and ZTNA users.
SaaS Security API
Cato SaaS Security API provides visibility and control of user activity in sanctioned cloud applications, even when traffic does not go through the Cato SASE Cloud Platform. It complements Cato’s inline CASB and DLP for comprehensive data protection. SaaS Security API mandates DLP and is licensed based on the enterprise’s total number of knowledge users.
Remote Browser Isolation
Cato RBI enables secure browsing of unknown and uncategorized websites by streaming the content through a remote virtualization server. It provides additional protection against ransomware, phishing, and other web-borne threats. It is licensed based on the sum of bandwidth and ZTNA account users.
Extended Detection and Response
Cato XDR Pro provides a layer of detection and response on top of Cato’s inline and API-based prevention and protection capabilities. It uses AI and ML to identify threats and anomalies in the account and provides a full threat investigation and lifecycle management framework inside the Cato SASE Cloud Platform. It is licensed based on the enterprise’s total number of knowledge users.
Endpoint Protection
Cato EPP protects enterprise endpoints against malicious software and attacks. It shares management and policies with the Cato SASE Cloud Platform, enabling consistency and visibility across the network and the endpoints. A license is required for every named user.
Digital Experience Monitoring
Cato DEM enables reactive and proactive identification, investigation, and remediation of application performance and user experience issues. For optimal efficiency, insights from active monitoring of users and application traffic are presented in visual, easy-to-understand dashboards and reports. It is licensed based on the enterprise’s total number of knowledge users.
Remote ZTNA Users
ZTNA Users (formerly SDP)
Cato ZTNA (formerly SDP) license enables enterprises to securely and optimally connect remote users to internal resources and the Internet via the Cato Client or the browser-based Clientless Access. A license is required for every named user.
Data Lake Storage
Data Lake Storage
Cato Data Lake Storage license allows enterprises to store event data exceeding the free tier of 2,000,000 events per hour with a retention of three months. An Additional Data Lake Storage license enables enterprises to expand into higher event counts, duration of storage, or both.
Managed Services, Support, and Professional Services
M/A/C/D Service
Cato Hands-Free Management is a managed service targeted to augment the enterprise’s IT team’s day-to-day management of its Cato account. A team of Cato experts is readily available to perform M/A/C/D (Move, Add, Change, Delete) operations on behalf of the customer. It is licensed based on the total number of sites and the account’s pooled bandwidth.
Last Mile Monitoring
Cato ILMM (Intelligent Last Mile Monitoring) is a managed service that continuously monitors last-mile internet circuits and works on behalf of the enterprise to resolve any blackouts and brownouts issues with the respective ISPs. It is licensed per site, with a minimum of 10 sites.
NOC
Cato NOCaaS (Network Operations Center as-a-Service) provides access to Cato’s 24/7/365 NOC team, which monitors and proactively addresses network-related issues in the customer’s account. Cato NOCaaS includes Cato Hands-Free and Cato ILMM. It is licensed based on the total number of sites and the account’s pooled bandwidth.
SOC
Cato Managed XDR provides access to Cato’s global team of professional security analysts. The team reviews incidents raised by the Cato XDR Pro, investigates them, and works with the customer to remediate them. Cato Managed XDR requires a Cato XDR Pro license, which is licensed based on the enterprise’s total number of knowledge users.
Designated Support
Cato DSE (Designated Support Engineer) offers a premium support service delivered by a named regional engineer with a deep understanding of the customer’s environment. It provides the enterprise with a single point of contact for all support needs and expedites issue resolution. It is licensed per account.
Technical Account Management
Cato TAM (Technical Account Manager) is a named Cato engineer who acts as the enterprise’s single point of contact and subject matter expert. TAM is deeply familiar with the enterprise account, enabling the delivery of proactive and reactive actions. It is licensed per account.
Professional Services
Cato Professional Services provides access to a team of Cato experts experienced with planning and deploying SASE and maintaining a production environment using the Cato SASE Cloud Platform. Professional services can be delivered remotely or on-site (T&E excluded) and is offered via a series of packaged hours or bulk hours.
Technical Project Management
Cato TPM (Technical Project Manager) leads SASE and SSE deployment and expansion projects. This is a named Cato professional responsible for project planning, monitoring, and execution, managing tasks, milestones, risk, collaboration, and communication. Cato TPM is offered as a part of the Professional Services packages or bulk hours.
Hardware & Add-Ons
Edge SD-WAN
Cato Socket edge SD-WAN device is a lightweight appliance provided by Cato. It enables fast, secure, and reliable connectivity from enterprise physical sites to the Cato SASE Cloud Platform. Sockets come in several models (X1500, X1600, X1600LTE, and X1700), covering every enterprise’s wired or wireless connectivity and reliability needs. They are purchased per device via payments over the term of the contract.
X1500 Rackmount
Cato X1500 Dual Rackmount Kit enables mounting the Cato X1500 and X1500B Sockets into a standard 19” network rack. Flexible mounting options enable the ports to be oriented to the rack’s front or back. Power adapters can also be affixed to the mounting kit tray. It is purchased for a one-time fee.
X1600 Rackmount
Cato X1600 Rackmount Kit enables mounting the Cato X1600 and X1600LTE Sockets into a standard 19” network rack. Flexible mounting options enable the ports to be oriented to the rack’s front or back. The power adapter can also be affixed to the mounting kit tray. It is purchased for a one-time fee.
X1600 Wall Mount
Cato X1600 Wall Mount Kit enables wall mounting of the Cato X1600 and X1600LTE Sockets. The power adapter can also be affixed to the mounting kit tray. It is purchased for a one-time fee.
Fiber Card
Cato Fiber Card is an add-on for the Socket X1700 and provides either two ports of 1Gb or 10Gb or four ports of 10Gb Fiber connectivity Both SFP and SFP+ are supported. The Fiber Card is shipped with GBICs pre-installed.
GBIC
Cato GBIC (Gigabit Interface Converter) is a hot-pluggable optical transceiver that converts serial electric signals to optical signals. It can be used in compliant gigabit ports on Cato Sockets. It is sold in sets of two.
Antenna
The Cato LTE Antenna Kit enables the installation of the Cato Socket 1600 LTE antenna remotely from the Socket device. It is intended for use in cases where the cellular reception at the location where the Socket is installed is weak or unreliable. It is purchased for a one-time fee.
Public IP Address
The Cato IP Address license allows the allocation of public IPv4 addresses from a Cato-owned IP address pool solely for the enterprise. Enterprises use Cato IP Address to control the source IP from which they egress their traffic to the internet and cloud applications, for through which they may route ingress traffic to internal resources. It is licensed as a subscription on per-IP address basis.