Cato SASE Cloud Reviews & Product Details

The console is what I like most about Cato. I am in it every day. It gives you a lot of in-depth information without being overly complicated. Everything is laid out well, and it’s easy to find what you need, troubleshoot issues, and see what’s happening across the network. AI makes it easier to find your place if you get lost. Review collected by and hosted on G2.com.

There really isn’t much I dislike about Cato. Like any platform, there are areas that take some time to learn, and occasionally finding a specific setting can take a little digging. Overall, though, my experience has been very positive Review collected by and hosted on G2.com.

The seamless site deployments, the simplicity of the web UI, the analytic data and technical feedback Cato provides - it makes any troubleshooting almost easy when fault finding, and also gives you great insight in regards to any improvements as per their best practices via their new AI Agents. I've used Cato daily for over 3 years now, and it's rapidly become my favourite SASE vendor Review collected by and hosted on G2.com.

Currently they only offer 4 hardware types of sockets, but I know there is more in the pipeline on the way. Review collected by and hosted on G2.com.

I like that Cato SASE Cloud is relatively straightforward to navigate, configure, and manage, despite having many moving parts. The platform's ease of use stands out, even with features like AI. I also really appreciate the technical support. I've worked with Cato support on complex issues, and I value how engineers are open to investigation and challenging assumptions, which makes resolving problems collaborative and effective. Although not all engineers operate the same way, the willingness to escalate issues and genuinely try to help is something I appreciate about their support team. Review collected by and hosted on G2.com.

One area I think could be improved is visibility around configuration changes. I regularly submit feature requests when I come across something operationally that I think could make the platform better. One live example that I haven't raised yet but it's on my list is being able to see directly on a rule who originally created it and who last modified it. That information is available through the auditing functionality, but when you are troubleshooting or reviewing a rule base, having to go into the audit trail and work backwards can be time-consuming, to say the least. Having that information available directly against the rule would make it much quicker to understand its history and give you useful context when investigating why something has been configured a particular way, especially when the rule counter is showing zero hits. Another area I would like to understand better is where Cato is heading with AI. I know Cato is already developing capabilities around AI security, including visibility and governance of AI usage, so for me, the interesting question is what that ultimately looks like operationally within the wider platform. As organizations move further into the AI era, I would like to see how these capabilities come together within the CMA and how naturally they fit into the day-to-day workflow of someone operating the environment. Review collected by and hosted on G2.com.

1) Improved and consistent end user experience with Cato clients and IdP integration.

2) Seamless and unified network security for all users and applications with SSE in Cato Cloud.

3) Streamlined operations with unified visibility and control in CMA.

4) Business agility through ease and speed of deployment with zero-touch sockets, clients, and cloud-delivered capabilities.

5) Reduction of TCO through standardization and simplification. Review collected by and hosted on G2.com.

Subscriptions are based on fixed term. It would be helpful to have more flexibility in service scope during the contract period. Review collected by and hosted on G2.com.

What I like the most is the unification of the network and security in a single console. The ability to manage SD-WAN, Next-Generation Firewall (NGFW), and remote access (ZTA) from a single panel drastically simplifies operations and reduces the complexity of managing multiple vendors. Review collected by and hosted on G2.com.

Sometimes the rigidity of cloud configuration can be limiting. Being an 'as-a-service' solution, you don't always have the level of granularity or extreme customization that traditional on-premises equipment allows (such as very specific routing rules or deep adjustments in the firewall kernel). Review collected by and hosted on G2.com.

I find the configuration of Cato SASE Cloud easy. The interface is clear, so I don't have to keep searching for where to set options. With AI assistance, I can easily find settings, and it also monitors my environment. I like that all settings are in one portal. The initial installation was very easy: with a few basic settings, I quickly connected the first SDP client. Review collected by and hosted on G2.com.

At the moment, no real issues Review collected by and hosted on G2.com.

It consolidates SD-WAN, firewall-as-a-service, secure web gateway, and zero trust network access into a single cloud-native platform. This not only simplifies management but also reduces the need for multiple vendors and point solutions. Review collected by and hosted on G2.com.

While the platform is streamlined and easy to use, it can feel somewhat limited when trying to implement highly specific or complex security policies compared to more granular enterprise-grade firewalls or standalone solutions. Review collected by and hosted on G2.com.

What I like best about Cato SASE Cloud is the centralized, all-in-one platform that seamlessly combines SD‑WAN, firewall, SWG, CASB, and ZTNA services under a single pane of glass. Deployment and onboarding are fast—spinning up new sites takes under an hour—and day-to-day management is far simpler compared to juggling multiple tools separate interfaces and licenses. Review collected by and hosted on G2.com.

Cato lacks certain advanced tools such as remote browser isolation, network sandboxing, and full DLP support. It also doesn't include a web application firewall (WAF) and could enhance intrusion detection (IDS/IPS) capabilities. The platform is often described as feature-limited compared to larger vendor suites. Throughput may be slower depending on the connection quality or distance from a PoP, leading to bottlenecks. The licensing model—based on bandwidth tiers—can be complex or cost-prohibitive, especially for smaller organizations. Migrating from legacy/point solutions (e.g., on-prem firewalls, appliances) requires planning and operational change. Review collected by and hosted on G2.com.

What I like best about Cato SASE Cloud is the combination of its ease of use and implementation, making it quick to deploy and simple to manage on a daily basis. The intuitive interface and centralized management streamline operations, even across multiple sites. Customer support is responsive and knowledgeable, ensuring any issues are resolved quickly. We use it frequently due to its reliability and comprehensive feature set, which covers secure connectivity, threat prevention, and traffic optimization. Additionally, its ease of integration with our existing tools and identity providers has made the transition smooth and efficient, enhancing both productivity and security. Review collected by and hosted on G2.com.

What I dislike about Cato SASE Cloud is that advanced customization and granular control options are somewhat limited compared to traditional firewalls. Reporting and analytics could be more detailed and flexible, and policy updates sometimes take a few minutes to apply. While the platform is stable and improving, it's still maturing in some enterprise-level features. Review collected by and hosted on G2.com.

The integration of CrowdStrike Falcon, a leading cloud-native endpoint protection platform, with JumpCloud’s open directory platform delivers a unified security approach combining identity, device, and threat intelligence. This powerful duo helps organizations adopt Zero Trust principles by tightly coupling endpoint posture with identity-based access control.

Strong Endpoint-Identity Correlation

CrowdStrike provides real-time endpoint telemetry (e.g., threat detection, vulnerability status), while JumpCloud governs identity and access. When integrated, organizations can enforce policies based on the security state of the device and the user's identity. Review collected by and hosted on G2.com.

While both platforms offer APIs and third-party connectors, the native integration isn’t as plug-and-play as with some vendor bundles (e.g., Microsoft Defender + Entra). Some organizations may need to configure custom scripts or use middleware.

2. Licensing Overlap for SMBs

For small businesses, the combination of EDR (CrowdStrike) and identity/security tools (JumpCloud) might Review collected by and hosted on G2.com.