New Features & Enhancements
Agentic AI for DEM Root Cause Analysis: We added an agentic AI assistant in Experience Monitoring (DEM) to understand degraded remote and office user experience faster. The AI assistant correlates network, device, application, and event data across the user experience path to identify the most likely root cause.
Use the AI assistant from the Remote Users and Office Users drill-down pages (show me the Experience Monitoring page)
DEM license required
User Education Notifications in Office Mode: Cover employees working in the office with user education notifications, so they receive a Client notification from wherever they connect.
Supported from Windows Client v6.14
Enhanced App Analytics Views: Quickly identify top contributors and analyze usage from different perspectives with these enhancements to the App Analytics page (show me the page):
View the top five values for any metric, such as User Name, Source Country, or Application Name
Create custom tables with group-by and pivot options for flexible, multi-dimensional analysis
Custom Themes for the CMA: Customize the look and feel of the Cato Management Application (CMA) with six built-in themes, in addition to the classic light and dark modes.
EDM Detectors for AI Security: Detect organization-specific sensitive data in AI prompts by matching values from your datasets. This helps admins apply more precise controls to sensitive customer or employee records.
Add exact data match (EDM) detectors to AI Security Engine Profiles
Use runtime policies to monitor, anonymize, or block matching prompts before they reach the AI vendor
AI Security for Users license required
New Findings Page for Coding Agents: Review security findings across your coding agents from one centralized page to quickly identify and prioritize issues that need attention.
Agent Interaction Events for Coding Agents: Use the new Agent Interaction event sub-type to indicate which coding agent activity is sent to third-party systems, such as a SIEM. This lets you identify potential policy violations from your SIEM and investigate the related activity in the CMA.
Events are created for the following app activities: User Prompt, LLM Response, Tool Call, and Tool Message
Hide the Connection Timer in the Cato Client: Choose whether to display the connection timer on the Client home page (show me the Client Access settings page). By default, the timer is shown.
Supported from Windows Client v6.14 and macOS Client v6.1
DEM Service Architecture Update: Experience Monitoring now runs as a separate service to improve resiliency. To ensure the service operates correctly for devices deployed with the Cato Client, add the following Cato service components to your security allowlist:
Windows:
demapp.exeMac:
/Library/Application Support/CatoNetworks/DemService.appLinux:
/usr/sbin/cato-demd
PoP Announcements
New ranges for the following PoP locations are now available:
London: 159.117.250.0/24
São Paulo: 199.27.57.0/24