Digital transformation challenges in China

Resolving issues with Cato SASE Cloud

• Cato Cloud and PoPs in China
• Compliance in China
• Unified security integrated with network monitoring
• Use of exit IP, automatic network route selection function

Cato Cloud and PoPs in China

Cato Networks has partnered with data centers and carrier networks approved by the Chinese government to deploy "PoPs (Points of Presence) - access points that perform security clouds, network route optimization, and remote access" in two locations in Beijing, two locations in Shanghai, three locations in Shenzhen, and Hong Kong. There are 90 locations around the world, but due to redundancy in multiple data centers, the total number of data center locations exceeds 90. By automatically selecting the PoP closest to each location, users are provided with the optimal network environment.

In addition, even when accessing remotely, there is no need to access the company's own data center in Japan as in the past. Instead, each remote access user will automatically connect to the fastest PoP, and network access will be distributed in parallel from each location, and security measures will be processed at high speed using a single-pass engine in a data center in China.

In addition, communications from China to Japan will be conducted between East and West via the Cato SASE Cloud's full-mesh backbone, optimizing network communications and reducing costs.

Compliance in China

Dealing with information regulations and compliance, such as China's Personal Information Protection Law, is very difficult. Cato SASE Cloud simplifies it. SASE's built-in DLP (Data Loss Prevention) reduces the burden of creating rules through automated profiles, allowing IT teams to focus on strategic projects rather than incident response. In addition, all event data is automatically stored in the cloud, so you can later investigate corporate communications on the management screen or export them as files, and you can investigate and preserve logs in the cloud.

​DLP Management Profile Settings that can be added by users

Unified security integrated with network monitoring

Cato SASE Cloud is one of the leaders in single-vendor SASE. In single-vendor SASE, all security measures are integrated and implemented in the cloud. Direct integration of a robust platform eliminates the need for complex configuration and preparation of fragmented security solutions. L7-compatible next-generation firewall (FWaaS) as a service, intrusion prevention system (IPS), zero trust network access (ZTNA) for remote access, etc. are important resources in building these zero trust environments, and to protect and simplify management, everything is shared with cloud services in PoPs around the world on a single platform.

By allowing only ZTNA-certified users and devices to access sensitive systems and combining it with the principle of least privilege and setting data loss prevention (DLP), sensitive data can be protected while meeting the strict standards of China's Cybersecurity Law. CASB also enables access control to cloud services that will continue to increase in the future, and all cybersecurity measures can be visualized and monitored by XDR with the push of a button on the SASE management screen without the need to install additional applications.

Use of exit IP, automatic network route selection function

Cato SASE Cloud can use three global IPs. Additional IPs can also be purchased.

MPLS has long been the standard for enterprise connectivity, but its cost and rigidity make it less ideal for today's dynamic, zero trust needs. Cato SASE Cloud offers a modern alternative with redundant SD-WAN, application-aware routing, dynamic path optimization and other capabilities. Enterprises benefit from MPLS levels of reliability and speed, plus built-in ZTNA gives them the flexibility to scale and support the zero trust/hybrid workforce that has taken hold during the COVID-19 pandemic.
For businesses that rely on multi-cloud platforms such as AWS, Azure, and Microsoft 365, slow connections can impact business operations, such as poor delivery of order data. Cato SASE Cloud's Smart Egress ensures that traffic flows efficiently through the closest PoP, reducing latency and providing consistent performance so employees can work seamlessly across even the most demanding applications.

By setting Cato's global IP for SaaS, you can prevent intrusion from outside.
The COVID-19 pandemic has led to a surge in remote work, with more people now working from anywhere, whether in the office or at home. As hybrid work becomes the new norm, reliable and secure remote access is essential. Cato SASE Cloud's mobile client provides remote employees across China with the shortest access to PoPs and high-performance, secure connections. This is evidenced by the stable VPN and no more failed file transmissions for our domestic customers.

Watch the video

Hoyer, a Danish electric motor manufacturer with a history of nearly half a century, connects its locations across Europe, Korea, and China and provides global protection against ransomware through its MDR service.

Case Study: H.I.S. Co., Ltd.

We immediately responded to the pandemic countermeasures that began at our base in China. We managed security measures for 100 global bases centrally at our headquarters, significantly reducing operational costs.

Summary

In today's cloud-native world, reliable connectivity is essential to success. For businesses looking to overcome the unique challenges of doing business in China, Cato SASE Cloud is a proven solution. By minimizing latency, strengthening security and simplifying compliance, we deliver simplified cloud services to optimally connect to the future.
Check out the Cato SASE Cloud demo and discover how your global enterprise can unlock its full potential.
Please feel free to contact us at cato-sales@macnica.co.jp.

Macnica
Networks Company 3rd Sales Division 2nd Sales Department 4th Section SASE EXPERT
Fujio Suzuki

In 1989, he was in charge of optical fiber products in the US. After that, he worked as a Macnica webmaster in the information systems department, building and managing websites. In 2005, he started working in cloud service sales, and in 2010, he promoted CSIRT as a Splunk product manager. In 2019, he was in charge of product marketing at Cato Networks. He is certified as a SASE Expert Level 2 and SSE Expert.
His hobby is marine sports.