CNCato Networks
Available through IT Raven
- Network and Voice
- Cybersecurity
Cato Networks delivers a company's wide area network and its network security as one cloud service, run over a private global backbone it operates. It was founded in 2015 and is based in Tel Aviv, Israel.
The design is simple to describe. Every office, cloud environment and remote user connects to the nearest Cato point of presence. The same software runs in each one, inspecting traffic once for every security function and carrying it across Cato's backbone in place of the open internet. You manage all of it from one web console. Cato calls itself the first single-vendor SASE platform. At least one carrier on this site delivers its own managed SASE service on Cato's platform, so you may meet it under another name.
Best for
- Companies with sites in several countries that get uneven performance over the internet and want one backbone with a service level behind it.
- Organizations leaving MPLS in stages.
- Businesses replacing an aging VPN with access granted application by application.
- IT teams that want to remove firewalls from branch offices and still inspect all traffic.
- Companies with workloads in more than one public cloud.
- Firms expanding in Asia and China, where Cato runs a dedicated link out of Beijing through a government-approved carrier.
- Teams that would hand day-to-day network changes to someone else.
What they offer
SD-WAN and SASE. Cato SASE Cloud is the whole service. At each site a Cato Socket, a small appliance, connects your internet, MPLS or cellular links to the backbone, balances traffic across them and picks the best path as conditions change. It is ready to use within minutes of getting power and a connection. Remote users connect with a client, or through a browser.
Managed Security. Cato SSE 360 is the security half: next-generation firewall, secure web gateway, cloud application control, data loss prevention, remote browser isolation, intrusion prevention and anti-malware, and zero trust access. Cato also offers endpoint protection managed from the same console, and managed detection and response from its own security operations center.
Cybersecurity
Managed Security
Network and Voice
SD-WAN and SASE
Coverage
- Australia
- Brazil
- Canada
- China
- England
- Germany
- Hong Kong
- India
- Japan
- Mexico
- Philippines
- Puerto Rico
- Singapore
- South Korea
- US (Nationwide)
- US Virgin Islands
Coverage is a starting point. We check every address before we quote it.
Proof
Customer stories Cato has published, told here without the customer's name.
A customer-loyalty programs company that connects offices across Europe. Part-way through a move to Microsoft Azure, it replaced an MPLS-and-dual-internet network that carried WAN optimizers and firewall appliances at every site with Cato's single SASE service. Each location now reaches the nearest point of presence through a Cato Socket, and security is applied in the cloud rather than on branch appliances.
An auto-service chain across more than 70 sites. It moved off MPLS to Cato SD-WAN as a lower-cost alternative and cut the outages that had been hitting its locations, with network changes automated rather than configured site by site.
A pet-supplies retailer with about 100 sites. It rolled out Cato SD-WAN to every location and retired the separate firewall appliances it had run in each branch, folding that inspection into the Cato cloud.
Cato also states a 99.999 percent availability commitment for its backbone, lists SOC 1 and SOC 2 reports and ISO 27001, 27017, 27018 and 27701, and says inspected data is never stored on its servers or shared. Support follows the sun from centers in five time zones at any hour.
Good to know
- The size of the backbone depends on which document you read: more than 45, more than 50 or more than 85 points of presence. The larger figure is in the newer brief. Ask for the current map.
- There are three ways to run it: yourself, shared with Cato or a regional partner, or fully managed.
- A Designated Support Engineer is an optional service capped at six hours a week within your business hours.
- You can exclude categories such as banking or health applications from traffic inspection.
- Part of the anti-malware protection uses machine learning from another security vendor.
- The threat report from its security operations center is described as quarterly in one document and monthly in another.
Similar companies
They offer some of the same services. Add two or more and we quote them against each other.
- Network and Voice
- Cybersecurity
- Cloud and Infrastructure
- Backup and Continuity
- +1 more
- Network and Voice
- Cybersecurity
- Cloud and Infrastructure
- Data Center and Colocation
- Network and Voice
- Unified Communications
- Cybersecurity
- Cloud and Infrastructure
- +2 more
- Network and Voice
- Unified Communications
- Cybersecurity
- Managed IT Services
How buying works
The store is the easy part. Staying on the account is the job.
Anyone can show you logos. The reason to buy here is what happens on install night, and on the ticket you open nine months later.
- 01
Build your quote list
Add services and companies as you shop. No form stands between you and the shelf.
- 02
We bring back real options
A person shops the bench against your addresses, then walks you through what fits and what does not.
- 03
We handle the order and install
Paperwork, site survey, install dates, cutover night. You get one thread, not five vendors.
- 04
We stay on your account
Same team for moves, adds, tickets and the next renewal. That is the part everyone else drops.