This article lists the different third-party integrations that you can connect to your Cato account and which license is required for the integration. Some integrations are included with the default account license.
Included means that the integration type is part of the default Cato account and doesn't require an additional license.
Note:
Cato account licenses use one of two models: Bursting Model (starting in January 2027) and Enforcement Model. The licenses listed in this table refer to both license models unless stated. Not sure which license your account uses? See Identifying your License Model.
Integration Type | Integration Description | Supported Apps & Vendors | License |
|---|---|---|---|
vSocket Connectivity | Create a virtual Socket site to connect your cloud tenant to the Cato Cloud For more information about vSockets, see the relevant articles in vSocket Sites. |
| Enforcement Model: Included Bursting Model: Bandwidth Pool |
Cloud Interconnect | Connect directly to another network using a data center cloud exchange via a service provider partner (such as Equinix’s Cloud Exchange Fabric or Megaport SDCI) For more information about Cloud Interconnect, see the relevant articles in Cloud Interconnect Sites. |
| Enforcement Model: Included Bursting Model: Bandwidth Pool |
Directory Service | Retrieve and synchronize user information from a user directory into your Cato account for efficient user-aware access control For more information about Directory Services, see the relevant articles in Directory Services. |
| Included |
User Authentication | Configure SSO for unified secured user access and authentication across enterprise apps and services For more information about authentication, see the relevant articles in Single Sign-On. |
| Enforcement Model: Included Bursting Model: ZTNA User |
CMA Admin Authentication | Configure SSO for Cato Management Application admins, providing unified, secure access and authentication For more information about CMA admin authentication, see Authenticating Admins. |
| Included |
Sensitivity Labels | Import sensitivity labels for DLP engine For more information, see Using MIP Sensitivity Labels in your Cato DLP Policy. |
| DLP |
App Activities | Monitor app activities from unmanaged and managed users by connecting apps via APIs For more information, see the relevant articles in Application Control via API with Audit Activities. |
| CASB |
Data Protection | Deliver App & Data security with data protection and threat detection for key SaaS apps using API-based integration For more information, see the relevant articles in Data Protection API. |
| Enforcement Model: CASB Bursting Model: DLP |
Interconnected Apps | Comprehensive visibility and risk insights into third-party plugins connected to sanctioned business-critical applications For more information, see the relevant articles in Interconnected Apps. |
| CASB |
Device Inventory | Discover, monitor, and manage devices connected to your network. For more information, see What is Device Inventory? and Device Management Connectors |
| Enforcement Model: IoT/OT Bursting Model: Asset Security |
Sign In Activities | Integrate your IdP app and collect sign-in audit activities For more information, see Configuring the Microsoft Entra ID (Azure AD) Connector. |
| Included |
EDR | Integrate with data from your EDR to collect endpoint alerts and incidents For more information, see Microsoft Defender for Endpoint Alerts: Configuring the XOps Integration, SentinelOne EDR: Configuring the XOps Integration, CrowdStrike: Configuring the XOps Integration |
| Events - Included Stories - XOps |
AI Security | Secure and govern AI usage across your organization with full visibility, policy enforcement, and data protection For more information, see the articles in AI Security (you must be logged in to view the articles). |
| AI for End Users AI for Applications |
XOps | Integrates data from Wiz into your XOps platform For more information, see Wiz: Configuring the XOps Integration |
| XOps |
Sign In Anomalies | Monitor IDP sign-in anomalies For more information, see Configuring the Microsoft Entra ID Protection Connector for Sign-In Anomaly Data |
| Included |
Security Checks | Monitor security checks for SaaS applications (SSPM) For more information, see the relevant articles in Data Protection API. |
| Included |
Experience Monitoring | Integrate Cato Cloud's Experience Monitoring with call metrics for Zoom, Teams, and Webex For more information, see the relevant articles in Experience Monitoring Connectors. For Webex see this article. For the Juniper Mist integration, see this article. For the Cisco Meraki integration, see this article. |
| DEM |
Cloud Storage | Generate an events feed directly from the Cato Data Lake to Azure and AWS storage For more information, see the relevant articles in Event Integration. |
| Included |
Alerts | Receive notifications based on CMA alerts For more information, see the relevant articles in Alerts. |
| Included |
SaaS Posture | Continuously evaluate the configuration and security settings of your SaaS applications. For more information, see the relevant articles in SaaS Posture Management. |
| CASB |
SIEM | Data integrations - SIEM, asset management, log and security analytics For more information, see Cato Data: Third-Party Supported Integrations. |
| Included |
Integration Tools | Terraform provider for Infrastructure as Code (IaC) and DevOps automation For more information, see Using Terraform with the Cato Cloud. |
| Included |