New Features & Enhancements
Enhanced DHCP Monitoring: Admins can now view and monitor any DHCP IP address allocated by Cato in these screens (Network > {site name} > Site Monitoring):
Known Hosts (Updated): We enriched the Known Host page with additional information including: MAC address, DHCP lease information, DHCP range, Last host activity, and more. Read more
DHCP Pools (New): This new page shows the following information for each configured DHCP range: Network range, Subnet, DHCP range, Number of Allocated IPs, and Number of Available IPs. Read more
DHCP IP Lease Event: Track DHCP IP allocations in the Events screen
New Features for Socket v15:
BGP Isolated Routing: We added a reserved BGP community for Socket sites to prevent specific routes propagation from the Socket to the PoP. Read more.
Supported from Socket version 15.0 and higher
Preferred Socket Port for Bypass Rules: Assign a preferred Socket WAN port for a bypass rule that the Socket uses for egressing traffic. Read more.
Supported from Socket version 15.0 and higher
Cato Management Application Enhancements:
Show Host Information Inside Policies: You can hover over the Host name inside a policy to view the following additional information for each Host: Host IP, Site, Interface, and Network Name
Usability Enhancements to Threats Dashboard and DLP Dashboard: Added a number of small fixes to make it easier to read and analyze the data in the Threats Dashboard and DLP Dashboard
Cato SDP Client Releases
macOS Client v5.2: We are starting the gradual roll-out for the macOS Client version 5.2. This version includes:
Device Posture: macOS Support for Client Connectivity Policy and Device Posture.
Enhanced Reauthentication Experience: A notification lets users know that the SSO or MFA session will soon expire, and allows them to seamlessly reauthenticate. Read more.
Status Bar Icon: Users can easily connect, disconnect, quit, and open the Client right from the status bar of macOS devices.
Security fixes and enhancements
Resiliency enhancements
For SDP users upgrading from v5.x to v5.2, a macOS limitation requires rebooting the device after upgrading the Client to v5.2
PoP Announcements
Monterrey, Mexico: A new Cato PoP will be available in Monterrey in the next few days.
Security Updates
IPS Signatures:
Malware - Rapper Bot
Null Byte Injection Enhancement
CVE-2022-42889
CVE-2022-36804
CVE-2022-31814
CVE-2022-31474
CVE-2022-0441
CVE-2021-21234
Application Database:
Added over 300 new SaaS applications (You can view the SaaS apps in Monitoring > Cloud Apps Catalog)
Enhanced over 80 app definitions
Updates to Application Control Policy: New granular actions for these apps:
Discord: Login, Logout, Send Message, Upload
Google Applications: Login (enhancement)
TLS Inspection:
Codeload Github – now supports TLS Inspection over browsers