Cato SASE Cloud Reviews & Product Details

I like that Cato SASE Cloud is relatively straightforward to navigate, configure, and manage, despite having many moving parts. The platform's ease of use stands out, even with features like AI. I also really appreciate the technical support. I've worked with Cato support on complex issues, and I value how engineers are open to investigation and challenging assumptions, which makes resolving problems collaborative and effective. Although not all engineers operate the same way, the willingness to escalate issues and genuinely try to help is something I appreciate about their support team. Review collected by and hosted on G2.com.

One area I think could be improved is visibility around configuration changes. I regularly submit feature requests when I come across something operationally that I think could make the platform better. One live example that I haven't raised yet but it's on my list is being able to see directly on a rule who originally created it and who last modified it. That information is available through the auditing functionality, but when you are troubleshooting or reviewing a rule base, having to go into the audit trail and work backwards can be time-consuming, to say the least. Having that information available directly against the rule would make it much quicker to understand its history and give you useful context when investigating why something has been configured a particular way, especially when the rule counter is showing zero hits. Another area I would like to understand better is where Cato is heading with AI. I know Cato is already developing capabilities around AI security, including visibility and governance of AI usage, so for me, the interesting question is what that ultimately looks like operationally within the wider platform. As organizations move further into the AI era, I would like to see how these capabilities come together within the CMA and how naturally they fit into the day-to-day workflow of someone operating the environment. Review collected by and hosted on G2.com.

1) Improved and consistent end user experience with Cato clients and IdP integration.

2) Seamless and unified network security for all users and applications with SSE in Cato Cloud.

3) Streamlined operations with unified visibility and control in CMA.

4) Business agility through ease and speed of deployment with zero-touch sockets, clients, and cloud-delivered capabilities.

5) Reduction of TCO through standardization and simplification. Review collected by and hosted on G2.com.

Subscriptions are based on fixed term. It would be helpful to have more flexibility in service scope during the contract period. Review collected by and hosted on G2.com.

What I like the most is the unification of the network and security in a single console. The ability to manage SD-WAN, Next-Generation Firewall (NGFW), and remote access (ZTA) from a single panel drastically simplifies operations and reduces the complexity of managing multiple vendors. Review collected by and hosted on G2.com.

Sometimes the rigidity of cloud configuration can be limiting. Being an 'as-a-service' solution, you don't always have the level of granularity or extreme customization that traditional on-premises equipment allows (such as very specific routing rules or deep adjustments in the firewall kernel). Review collected by and hosted on G2.com.

It consolidates SD-WAN, firewall-as-a-service, secure web gateway, and zero trust network access into a single cloud-native platform. This not only simplifies management but also reduces the need for multiple vendors and point solutions. Review collected by and hosted on G2.com.

While the platform is streamlined and easy to use, it can feel somewhat limited when trying to implement highly specific or complex security policies compared to more granular enterprise-grade firewalls or standalone solutions. Review collected by and hosted on G2.com.

What I like best about Cato SASE Cloud is the centralized, all-in-one platform that seamlessly combines SD‑WAN, firewall, SWG, CASB, and ZTNA services under a single pane of glass. Deployment and onboarding are fast—spinning up new sites takes under an hour—and day-to-day management is far simpler compared to juggling multiple tools separate interfaces and licenses. Review collected by and hosted on G2.com.

Cato lacks certain advanced tools such as remote browser isolation, network sandboxing, and full DLP support. It also doesn't include a web application firewall (WAF) and could enhance intrusion detection (IDS/IPS) capabilities. The platform is often described as feature-limited compared to larger vendor suites. Throughput may be slower depending on the connection quality or distance from a PoP, leading to bottlenecks. The licensing model—based on bandwidth tiers—can be complex or cost-prohibitive, especially for smaller organizations. Migrating from legacy/point solutions (e.g., on-prem firewalls, appliances) requires planning and operational change. Review collected by and hosted on G2.com.

What I like best about Cato SASE Cloud is the combination of its ease of use and implementation, making it quick to deploy and simple to manage on a daily basis. The intuitive interface and centralized management streamline operations, even across multiple sites. Customer support is responsive and knowledgeable, ensuring any issues are resolved quickly. We use it frequently due to its reliability and comprehensive feature set, which covers secure connectivity, threat prevention, and traffic optimization. Additionally, its ease of integration with our existing tools and identity providers has made the transition smooth and efficient, enhancing both productivity and security. Review collected by and hosted on G2.com.

What I dislike about Cato SASE Cloud is that advanced customization and granular control options are somewhat limited compared to traditional firewalls. Reporting and analytics could be more detailed and flexible, and policy updates sometimes take a few minutes to apply. While the platform is stable and improving, it's still maturing in some enterprise-level features. Review collected by and hosted on G2.com.

The integration of CrowdStrike Falcon, a leading cloud-native endpoint protection platform, with JumpCloud’s open directory platform delivers a unified security approach combining identity, device, and threat intelligence. This powerful duo helps organizations adopt Zero Trust principles by tightly coupling endpoint posture with identity-based access control.

Strong Endpoint-Identity Correlation

CrowdStrike provides real-time endpoint telemetry (e.g., threat detection, vulnerability status), while JumpCloud governs identity and access. When integrated, organizations can enforce policies based on the security state of the device and the user's identity. Review collected by and hosted on G2.com.

While both platforms offer APIs and third-party connectors, the native integration isn’t as plug-and-play as with some vendor bundles (e.g., Microsoft Defender + Entra). Some organizations may need to configure custom scripts or use middleware.

2. Licensing Overlap for SMBs

For small businesses, the combination of EDR (CrowdStrike) and identity/security tools (JumpCloud) might Review collected by and hosted on G2.com.

I highlight its excellent network connectivity and the wide reach it offers throughout Latin America. Additionally, I value its level of security, as it operates similarly to a SIEM. Review collected by and hosted on G2.com.

So far I haven't found anything wrong, all its functions are excellent. Review collected by and hosted on G2.com.

Cato combines Next-Generation Firewall (FWaaS), Secure Web Gateway (SWG), Intrusion Prevention System (IPS), Cloud Access Security Broker (CASB), and Zero Trust Network Access (ZTNA) into a single platform, ensuring consistent security policies across all users and locations Review collected by and hosted on G2.com.

Feature Gaps

Complex Pricing: Pricing models can be complex or costly for smaller organizations or specific use cases.

Limited Customization: Being a managed service, it may offer less flexibility than traditional on-prem solutions Review collected by and hosted on G2.com.

Better Manageability of console. Product is user friendly as the deployment was custom tailored to be without intervention and configuration also surpassed all customer expectations. The implementation of product has also been a fantastic experience as the transition of existing policies were quite easlier for transition. As we are using this product on a daily basis, we have been able to mitigate the challenges faced earlier and ease the administration to a subtle level. The ease of integration with several compatible OEMs were also much effective and substantial. While the product have seen use cases been met properly, customer support is also one very useful and important delight where we got good support in terms of technicality and ease of use. Review collected by and hosted on G2.com.

None as such. Need much further evaluation to drill the product to a functionality level where dislikes of product can be highlighted thereof. Review collected by and hosted on G2.com.