New Features & Enhancements
IPS Engine Enhancements: We added new machine learning models and algorithms to provide real-time protection against malicious domains created for cybersquatting or by a domain generation algorithm (DGA). These threats can’t be effectively stopped using static threat feeds, due to constantly shifting tactics for creating the domains. To address this, Cato developed this unique capability for real-time detection of new malicious domains.
Enhanced Filtering Capabilities for Support Self-Service Portal: The Support Self-Service portal now supports adding multiple IPs to the destination filter.
ILMM Service Enhancement - Scheduled Maintenance for Sites and Links: ILMM customers can now define maintenance windows for sites and links, and let the ILMM service know about upcoming disruptions. This means that the ILMM service is paused for the sites or links during the duration of the maintenance window.
Security Updates
IPS Signatures:
Ransomware Abyss (New)
Ransomware CrossLock (New)
Ransomware CryptNet (New)
Ransomware Dark Power (New)
Ransomware IndustrialSpy (New)
Ransomware Money Message (New)
Ransomware Nokoyawa (New)
Ransomware Rorschach (New)
Ransomware Trigona (New)
Malware Emotet (Enhancement)
CVE-2023-25194
CVE-2023-23752
CVE-2023-22960
CVE-2023-22952
CVE-2023-22374
CVE-2023-1112
CVE-2022-47986
CVE-2022-46164
CVE-2022-39952
CVE-2022-37155
CVE-2022-36537
CVE-2022-29774
CVE-2021-41403
CVE-2021-35250
CVE-2021-30497
CVE-2021-29156
Suspicious Activity Monitoring:
Powershell response RCE (New)
Powershell download MZ file (New)
Python download PE file (New)
Ruby download binary (Enhancement)
Application Database:
Added more than 100 new SaaS applications (you can view the SaaS apps in the Apps Catalog)
Microsoft Azure enhanced with new Azure sub-services
Line (Enhancement)
Line Works (Enhancement)
LinkedIn (Enhancement)
Microsoft Azure (Enhancement)
Naver (Enhancement)
RADIUS Protocol Over TLS (Enhancement)
Application Control Policy (CASB):
Enhanced granular actions for these apps:
WhatsApp: Upload, Download
Dropbox: Upload, Download
Data Loss Prevention (DLP):
Enhanced granular actions for these apps:
Dropbox: Upload, Download
TLS Inspection:
Safari browser (Enhancement)