Cato SDP Client Releases
Linux Client v5.1: We are planning to release Linux Client v5.1 during the week of May 22nd. These are the features and enhancements for this version:
New Device Posture Check Provides Increased Security: You can now include Anti-Malware, Firewall, Patch Management and Device Certificate checks within your Device Posture Profiles. The Device Posture Profile can be included in your Client Connectivity and Security policies. These checks include:
Increase access control capabilities by ensuring the SDP users or user groups in the policy have the required device posture before connecting to your network
Define Device Posture requirements in your Security policies to access corporate resources
User Awareness Support for Linux Devices: Cato’s Identity Agent for Linux Clients supports User Awareness for users provisioned with all supported IdPs.
Browserless Support for SSO: You can now authenticate with SSO on headless devices, without a browser.
This is supported on Azure SSO, and requires authenticating via another device.
Support for Cato Automatic Upgrades: Starting from this version, Linux Clients can be automatically upgraded using the Cato upgrade service.
For more information about the Client rollout process, see Client Lifecycle Management
Security Updates
Application Database:
New Azure Sub-Services Enhance Azure Classification: We added over 80 Azure sub-services to our application database and you can now set policies for them as specific Azure apps.
There is no change to existing policies set for the Azure application
Event logs report a specific app ID when a sub-service is identified, instead of the general Microsoft Azure app ID
The Apps Catalog includes a detailed description for each new Azure sub-service app
Added more than 100 new SaaS applications (you can view the SaaS apps in the Apps Catalog), including:
Telegram Voice Call
Enhanced these SaaS applications:
Telegram
Kakao Corp Services
KakaoTalk
Rakuten
IPS Signatures:
Ransomware Rea (New)
Malware IcedID (Enhancement)
CVE-2017-0144/EternalBlue/MS17-010 (Enhancement)
CVE-2023-29324
CVE-2022-4732
CVE-2022-29775
CVE-2022-24990
CVE-2021-21243
CVE-2020-5741
CVE-2019-13585
Suspicious Activity Monitoring:
Curl response RCE (New)
Lateral WinSCP transfer (Enhancement)
Lateral Netcat transfer (Enhancement)
Downloaded NetCat (Enhancement)
Application Control Policy (CASB):
Enhanced granular actions for the following app:
Box: Upload
Data Loss Prevention (DLP):
Support added for script files, including: VBS, VBE, WSF, WSC, BAT
Added these new file types:
Executables: MSI, DLL, HTA
Archives: CAB
Other file types: Flash, Torrent
PoP Announcements
Vancouver, Canada: A new Cato PoP will shortly become available in Vancouver.
Frankfurt, Germany: A second Cato PoP will shortly become available in Frankfurt.