Socket Version 27.0 Release Notes

New Features & Updates

Socket version 27.x includes the firmware for new features, and in the coming weeks, we will update the Cato Cloud and release the following features:

• Multiple DHCP Ranges for Site VLANs: Configure multiple DHCP ranges on any site VLAN to support more flexible IP allocation across segmented networks.

  • Previously supported only for native ranges

• Device Labels and Groups for Policies and Visibility: Classify devices with labels and use them in groups to simplify traffic visibility and apply policies consistently across LAN, WAN, and Internet firewall rules. This helps admins manage device-based access at scale.

• Azure vSocket Support for v6 and Newer Instances: Deploy Azure vSockets on certified v6 and newer Azure instances to increase throughput and support regions where v5 instances are unavailable, such as East US.

• Enhanced X1600 Wi-Fi Capabilities: Manage X1600 Wi-Fi deployments with expanded configuration and monitoring capabilities, including network analytics over time, advanced radio settings, and Socket LED indications.

• Flexible High-Capacity Add-On Connectivity for X1700C Sockets: Install different add-on module types on the same X1700C Socket, including the new 2x25G and 2x100G modules, to support higher-throughput site designs.

• Large-Scale WAN Recovery with X1700C Socket Hubs: We added support for up to 24,000 Off-Cloud tunnels on an X1700C Socket hub, helping large hub-and-spoke deployments maintain critical site connectivity in the rare case of a Cato Cloud availability event.

• BGP Configuration Updates Without Session Reset: Apply supported BGP routing changes, including summary route and advertisement settings, while keeping the BGP session established. This helps reduce traffic disruption during configuration updates.  

• Socket Static WAN Configuration Visibility: The Sockets & Accessories page shows which Sockets use static WAN settings, helping admins review site connectivity configuration and plan network changes with more confidence.

• Expanded Socket and Hardware Metric Visibility: Gain deeper insight into Socket performance in the Network Analytics and Experience Monitoring pages with new hardware, port, and flow metrics.

  • New data includes memory usage, flow counts and rates, per-port packet rates, and Socket uptime

• TCP-Based Socket Traceroute in Experience Monitoring: The Path Analysis section in Socket site drill-down pages shows periodic traceroute (MTR) results for paths in and out of the tunnel. This helps admins investigate connectivity issues between the Socket, PoP and applications.

  • Requires configuration of TCP probes

  • DEM license required

• Dynamic Link Aggregation for Sockets: Use Link Aggregation Control Protocol (LACP) to dynamically establish LAG connections between Socket LAN ports and neighboring switches, helping improve link resiliency and aggregate capacity for site connectivity.

• vSocket Deployment on KVM: Customers can deploy vSockets in KVM-based virtualization environments, providing greater flexibility for virtual site connectivity beyond VMware-based deployments.

• In addition, this version includes:

  • Stability improvements

  • Security updates

  • Bug fixes

SSH and SSL Versions for Socket v27

• OpenSSH Version: 10.2p1

• OpenSSL Version: 3.5.5

Summary of Minor Versions

• v27.0.23945 - resolved issues 204056, 204759

• v27.0.24031 - resolved issues 194730, 205977, 207354

Resolved Issues