Just having a policy on paper is not enough. How do you actually enforce it? That's where AI Security from Cato gives us the fine-grained control capabilities to turn our Policy Rules into Action.
One of the reasons we chose Cato was that it's very simple. It doesn't add fancy features just for the sake of it; it simply does what it's supposed to do. After going through a lot of POCs and tests, we preferred that approach over solutions that give you 10 extra features they cannot fully support.
Cato AI Security gives us visibility into what's actually happening with AI across the enterprise. That's the foundation for everything else — policy, training, investment decisions. Without it, you're managing risk you can't see.
Anything Palo Alto Networks can do, I can do on Cato.
We put Cato AIM Security in line with our customer-facing admin agent—a type of AI product we released to the market. Cato AIM Security provided the additional protection we needed by masking sensitive parts of the data that customers unintentionally put into the chat. This also applied to prompts within enterprise customer GPTs that employees were building; for example, when a customer admin agent unintentionally included sensitive data, like Social Security numbers, in the prompts. With Cato AIM Security, we were able to redact that data before it reached the model or a SaaS application, making internal adoption much smoother. The change was simple, as we weren't blocking anything—just masking the sensitive portions of the data.
As a security-first company, we hold ourselves to a higher standard — Cato AI Security helps us maintain that bar without slowing down.
With Cato's cloud-native SASE and converged SD-WAN, we eliminated our reliance on hardware, freeing us from upgrade cycles and lifecycle management while dramatically simplifying network operations and reducing ongoing operational overhead.
We used to spend our time managing vendor relationships and chasing problems. Now we’re focused on initiatives that actually move the business forward. That’s a different kind of IT team.
We are very happy with Cato, to be honest. With our previous provider, it took a lot of time to do commits for the rules, but with Cato, we can commit changes really fast. We see the difference, and we're really happy with Cato.
With MDR and Cato, including SD-WAN, the security stack, and remote access, it's way easier than before when we weren't using Cato. We can do three times the security and network management work with the same resources compared to previous solutions.
Basically, we built some exceptions for our global, very strict policies with CASB. No other solution would allow us to do that granular kind of access—basically allow certain sites and certain kinds of downloads from those sites, depending on your location and local regulations. It might even be necessary to have a solution like that in place to fulfill certain government requirements.
It definitely improves the speed, without any doubt. In our digitization efforts, requirements for speed fluctuate—there are huge peaks and then it drops. The Cato platform provides the time to market for changes when we need speed, and allows for less urgency when we don't. It really adjusts to how the business requires speed at different times.
I have never had a site come online as easily and smoothly as with the Cato Sockets we deployed in Malaysia. I have deployed numerous remote locations worldwide and compared to other solutions this was my first time having a true plug and play experience bringing a remote site online. Their simplicity allowed me to be connected and configuring devices before the local team even realized setup was done, despite language barriers.
We chose Cato as the core of our network redesign because it’s delivering real, measurable value. The sockets and bandwidth pooling have taken the complexity out of remote connectivity. We can bring new sites online in literal minutes and balance bandwidth without contract negotiations. The network scales with our product development, easily handling large tests and migrations. In our last renewal, we expanded total bandwidth capacity and doubled down on pooling, and the improvement was immediately visible across every site. Since adopting pooling, site-specific bottlenecks have disappeared, even during heavy usage. The investment has absolutely paid dividends in saved time for our network engineers.
One of the things that convinced us about Cato is that you release new features and enhancements every month. We've never seen that before—it's really impressive and for us it was a clear sign of the hard work happening behind the scenes. With traditional solutions, adding all those features would probably bring the system down, but Cato just handles it.
Use Cato for VPN
What do you like best about the product?
Easy to manage from the console and user friendly.
What do you dislike about the product?
Sometime its frequently disconnect and reconnect again.
What problems is the product solving and how is that benefiting you?
Previously we were using open VPN application, we thought CATO is more secure than open VPN.
With SonicWall at each site, it was incredibly cumbersome to run updates or troubleshoot because you had to log into a jump box and then into each individual firewall. With Cato Networks, having everything under one pane of glass has been really nice.
There are functions within Cato where we've seen a lot of benefit from the security side. Beyond just providing the secure access, it helps us stop malicious sites, such as those that aren't categorized yet, and similar threats. We've seen a lot of benefit there in stopping activity that has made it past other measures, so we're using Cato as a security position for our organization. One of the additional benefits that we have experienced is when we provide our feedback on our quarterly calls, that those suggestions or issues, typically get addressed within the next couple of rollouts, so we know that we are being heard!!
CATO made life easy, from global connectivty to security it is super
What do you like best about the product?
I like backbone private connectivity and how the sites community with each other automatically after connecting a site is a very nice feature
What do you dislike about the product?
improve speed inside country by doing caching
What problems is the product solving and how is that benefiting you?
Connecting global sites to improve speed
User-Friendly SASE with Exceptional Network Segmentation
What do you like best about the product?
What I like best about Cato SASE Cloud is the centralized, all-in-one platform that seamlessly combines SD‑WAN, firewall, SWG, CASB, and ZTNA services under a single pane of glass. Deployment and onboarding are fast—spinning up new sites takes under an hour—and day-to-day management is far simpler compared to juggling multiple tools separate interfaces and licenses.
What do you dislike about the product?
Cato lacks certain advanced tools such as remote browser isolation, network sandboxing, and full DLP support.It also doesn't include a web application firewall (WAF) and could enhance intrusion detection (IDS/IPS) capabilities.The platform is often described as feature-limited compared to larger vendor suites.Throughput may be slower depending on the connection quality or distance from a PoP, leading to bottlenecks .he licensing model—based on bandwidth tiers—can be complex or cost-prohibitive, especially for smaller organizations.,Migrating from legacy/point solutions (e.g. on-prem firewalls, appliances) requires planning and operational change .
What problems is the product solving and how is that benefiting you?
Traditional setups require separate tools—SD‑WAN, VPNs, firewalls, secure web gateways—each managed separately. Cato consolidates everything into a single cloud-native platform, eliminating “swivel-chair IT troubleshooting” and simplifying overall infrastructure management.Legacy WANs often experience latency and packet loss, and MPLS is expensive. Cato’s global private backbone delivers low latency, reliable performance, and redundancy, enabling fast site-to-site connectivity and internet access.Disparate security appliances often lack deep inspection and uniform policy enforcement. Cato integrates NGFW, IPS, SWG, CASB, anti-malware, and ransomware protection in a single-pass inspection model for consistent enforcement everywhere
Cato SASE Cloud: Easy to Use, Secure, and All-in-One
What do you like best about the product?
What I like best about Cato SASE Cloud is the combination of its ease of use and implementation, making it quick to deploy and simple to manage on a daily basis. The intuitive interface and centralized management streamline operations, even across multiple sites. Customer support is responsive and knowledgeable, ensuring any issues are resolved quickly. We use it frequently due to its reliability and comprehensive feature set, which covers secure connectivity, threat prevention, and traffic optimization. Additionally, its ease of integration with our existing tools and identity providers has made the transition smooth and efficient, enhancing both productivity and security.
What do you dislike about the product?
What I dislike about Cato SASE Cloud is that advanced customization and granular control options are somewhat limited compared to traditional firewalls. Reporting and analytics could be more detailed and flexible, and policy updates sometimes take a few minutes to apply. While the platform is stable and improving, it's still maturing in some enterprise-level features.
What problems is the product solving and how is that benefiting you?
Managing multiple technologies(different firewalls technologies, MPLS) and integrations across different devices is challenging. Cato CMA helps streamline configuration across all sites in a single step, reducing overhead for network engineers and the security team.
Cato SASE
What do you like best about the product?
Cato combines Next-Generation Firewall (FWaaS), Secure Web Gateway (SWG), Intrusion Prevention System (IPS), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) into a single platform, ensuring consistent security policies across all users and locations
What do you dislike about the product?
Feature Gaps Complex Pricing: Pricing models can be complex or costly for smaller organizations or specific use cases. Limited Customization: Being a managed service, it may offer less flexibility than traditional on-prem solutions
What problems is the product solving and how is that benefiting you?
ZTN and SD-WAN.
With Verizon SD-WAN (on-prem) and Cisco firewalls, it was time consuming to patch 52-53 firewalls and manage licensing. Cato, bundled with internet and SD-WAN capabilities, offers us more granularity and is easier to manage, reducing the number of devices we need.
CrowdStrike + JumpCloud Integration
What do you like best about the product?
The integration of CrowdStrike Falcon, a leading cloud-native endpoint protection platform, with JumpCloud’s open directory platform delivers a unified security approach combining identity, device, and threat intelligence. This powerful duo helps organizations adopt Zero Trust principles by tightly coupling endpoint posture with identity-based access control. Strong Endpoint-Identity Correlation CrowdStrike provides real-time endpoint telemetry (e.g., threat detection, vulnerability status), while JumpCloud governs identity and access. When integrated, organizations can enforce policies based on the security state of the device and the user's identity. Benefits: Blocks access from compromised or non-compliant devices Supports Zero Trust access models Reduces lateral movement and insider threats
What do you dislike about the product?
While both platforms offer APIs and third-party connectors, the native integration isn’t as plug-and-play as with some vendor bundles (e.g., Microsoft Defender + Entra). Some organizations may need to configure custom scripts or use middleware. 2. Licensing Overlap for SMBs For small businesses, the combination of EDR (CrowdStrike) and identity/security tools (JumpCloud) might
What problems is the product solving and how is that benefiting you?
Problem 1: Traditional Antivirus Can’t Stop Modern Threats CrowdStrike Falcon uses AI-driven behavioral analysis and threat intelligence to detect and stop advanced threats like ransomware, fileless attacks, and zero-day exploits in real time. Slow Detection and Response Times.
cato is good product
What do you like best about the product?
unified approach, ease of management, and robust security features. Specifically, the centralized management interface and the integration of SD-WAN and network security in a single platform are frequently cited as key benefits.
What do you dislike about the product?
Cato SASE Cloud (Secure Access Service Edge) is a popular cloud-native networking and security platform. While it has many strengths, including ease of deployment, centralized management, and strong security integration, there are some common criticisms or potential drawbacks that users and analysts might point out:
What problems is the product solving and how is that benefiting you?
Cato SASE Cloud addresses several critical challenges in modern enterprise networking and security. Here’s a breakdown of the problems it solves and how that benefits organizations and users: