Cato SASE Cloud
WAN edge infrastructure software
SD-WAN solutions
Cloud access security broker (CASB) software
Cloud edge security software
Secure access service edge (SASE) platforms
Zero trust networking software
Cloud security software
Zero trust architecture software
Secure service edge (SSE) solutions
Network as a service (NAAS) platforms
- Features
- Ease of use
- Ease of management
- Quality of support
- Affordability
- Market presence
Take the quiz to check if Cato SASE Cloud and its alternatives fit your requirements.
Contact the product provider
Free Trial
Free version unavailable
Small
Medium
Large
- Real estate and property management
- Construction
- Retail and wholesale
What is Cato SASE Cloud
Cato SASE Cloud is a cloud-delivered networking and security platform that combines SD-WAN connectivity with secure web access and remote access controls delivered from a global points-of-presence backbone. It is used by IT and security teams to connect branch offices, cloud resources, and remote users while applying centralized security policies. The service typically uses lightweight edge devices or software clients to onboard sites and users and routes traffic through Cato’s cloud for inspection and optimization. It is positioned for organizations that want a single managed service for WAN edge and SSE capabilities rather than assembling separate products.
Unified WAN and security
The platform delivers SD-WAN and security services from the same cloud control plane, which can reduce the need to integrate separate WAN edge and security stacks. Centralized policy and logging apply across branch, user, and cloud traffic flows. This approach can simplify operations compared with architectures that rely on multiple vendor appliances and separate security gateways.
Cloud backbone with PoPs
Traffic can be carried over the provider’s global PoP network rather than relying solely on the public internet between sites, which can improve consistency for some routes. The PoP model supports rapid onboarding of new locations without deploying full security stacks at each site. It also supports distributed inspection close to users and branches, which is relevant for hybrid work and SaaS access patterns.
Multiple access on-ramps
Cato supports connecting branch sites, cloud environments, and remote users through a mix of edge appliances and software clients. This flexibility helps organizations standardize connectivity and security controls across different endpoint types and locations. It can be advantageous versus solutions focused primarily on a single form factor (for example, router-centric WAN edge or cloud-only connectivity).
Provider dependency and lock-in
Because routing, optimization, and security inspection depend on the vendor’s cloud PoPs, service quality is tied to PoP coverage and the provider’s operational performance. Migrating away can require re-architecting WAN and security controls that were consolidated into the service. Organizations with strict requirements for self-hosting or full on-prem control may find the model less suitable.
Not best for niche routing
Enterprises with highly customized routing, advanced segmentation designs, or specialized edge features may find some capabilities less flexible than building with dedicated routing platforms and separate security components. Certain low-level network behaviors can be constrained by the managed, cloud-delivered architecture. This can matter in complex multi-domain networks or environments with legacy interconnect requirements.
Cost and sizing complexity
A consolidated SASE subscription can simplify procurement, but total cost depends on bandwidth tiers, site counts, and enabled security features. Organizations may need careful sizing to avoid overpaying for capacity or features not used across all locations. Comparing costs against a mix of existing WAN contracts and point security tools can be non-trivial.
Plan & Pricing
Pricing model: Subscription / bandwidth- and user-based licensing (usage-like) How Cato describes it on its official site: - Licensing is sold as site bandwidth licenses (Mbps per site) and mobile/user licenses; advanced security services, managed services, and hardware (Cato Socket) are add-ons. - Purchases, upgrades, and renewals are handled via Cato sales or authorized resellers/partners; prices are set on the applicable Order and are not published on the public site. Public list prices: Not published on Cato’s official website. Official documents (MSA, product pages, and support knowledge base) describe license types, bandwidth-based site licenses, and that trial licenses exist, but do not list dollar amounts. Example licensing elements (as documented on Cato’s official site, not prices):
- Site bandwidth licenses (Mbps) – assigned per site (regional/global pools supported).
- Mobile/remote access user licenses (per-user).
- SSE 360 security stack (included in SASE offering as a licensed service).
- Cato Socket hardware (sold/managed as HaaS) and optional managed services (MDR, ILMM, PS) – priced per quantity or per site. Notes & procurement:
- Cato’s MSA states fees are set forth in the applicable Order and that Cato treats pricing as confidential.
- The Cato learning/support docs state trial licenses (default 30 days) are available for PoC and that to purchase you must contact Cato or a reseller.
- Some specific product constraints are documented (e.g., Cloud Interconnect minimums such as 500 Mbps for a Cloud Interconnect site), but no list prices accompany these items on the official site.
Seller details
Cato Networks Ltd.
Tel Aviv, Israel
2015
Private
https://www.catonetworks.com/
https://x.com/catonetworks
https://www.linkedin.com/company/cato-networks/
