New Features & Enhancements
New Windows Client v5.15 Release: During the week of May 19, 2025, we are starting the rollout of the new Client version for Windows (v5.15). This version includes:
Advanced Device Posture Collection: To improve performance when connecting, Device Posture is now collected continuously, even before connecting, to ensure Device Posture stays up-to-date.
Bug fixes and enhancements, including:
Improved the Client flows for better connection and reconnection time, and reduced errors
Reporting Client Version Known Limitations and Resolved Issues: We are now reporting the Known Limitations and Resolved Issues as part of the Client releases.
You can also ask the Knowledge AI Assistant in the CMA for information about Client versions
Enhanced Admin Experience for Managing TLS Inspection Policy: We have enhanced the TLS Inspection Policy to give administrators more flexibility, speed, and control when configuring policies.
API support for managing the policy
For more information see the Cato GraphQL API ReferenceAbility to modify the policy in parallel by multiple admins
Faster and more responsive for policies with many rules
Identical Internet-Only IP Ranges: To simplify network management and improve security for guest traffic, you can now configure identical IP ranges in multiple sites to be used for Internet-only traffic. These ranges are not propagated to the global routing table, preventing communication with the WAN.
We recommend as a guest WiFi best practice, to use the Internet-only ranges together with the Cato captive portal
Supported for physical Sockets only, v21 and higher
Click here to watch a video recording of this feature
BGP Inbound Route Filters for Socket Sites: We are adding support for inbound Route Filters, providing granular control and improved scalability to accept or drop BGP routes.
You can use CIDR lists or BGP communities to determine which routes to filter
Supported for Socket sites v21.1 and higher (support for IPsec sites is coming soon)
Click here to watch a video recording of this feature
New PoP Location for Cloud Interconnect: A new PoP for Cloud Interconnect in Los Angeles is now available to immediately connect a site, expanding connectivity and access on the West Coast of the US.
API Support for App Catalog and DLP Content Types: We added the following new API queries:
App Catalog - Query the data for apps, including Compliance, Security, and CASB Activities:
catalogApplicationList - All apps and data
catalogApplication - Single app
DLP Content - Query the types of content for the DLP Data Inline Protection rule
contentTypeGroupList
PoP Announcements
New ranges are available for the following PoP locations:
Charlotte, US: 199.27.39.0/24
Seattle, US: 199.27.38.0/24
Tokyo, JP: 123.253.154.0/24
Note:
Content described in this update is gradually rolled out to the Cato PoPs over a two-week period. In addition, new features are gradually activated in the Cato Management Application over the same two-week rollout period as the PoPs. For more information, see this article. See the Cato Status Page for more information about the planned maintenance schedule.