product
- About Cato Networks
- About Cato SASE Cloud
- Unification of shadow IT countermeasures by Cato CASB,
- Information leakage countermeasures with Cato Smart DLP
- Safe website browsing with Cato RBI
- CATO socket Easily connect existing LAN environment to SASE. Migration to SASE made easy
- Cato SASE XDR
- Cato DEM(Digital Experience Monitoring)
Application for evaluation machine

Cato Networks
Cato Networks
Introducing how to prevent unauthorized login to the cloud using SASE

~Restrictions on source IP addresses for SaaS applications~
Introduction
With the increase in the use of the cloud by companies, there are an increasing number of cases where source IP addresses are restricted when accessing web resources and SaaS.
A global IP address is required for source IP address restrictions in these SaaS and web resources.
Cato Cloud acts as a proxy, so all communications that go through Cato Cloud are converted to Cato PoP (Point of Presense) IP addresses and communicated to the Internet.
For Cato Cloud
You can use up to 3 global IP addresses for free with Cato Cloud.
Furthermore, by purchasing additional global IPs, it is possible to use four or more global IP addresses.
Select one of the 75 or more PoPs in the world (as of October 2022) and issue the global IP address of that country.
Once a global IP address is obtained, it becomes unique to the customer and can be used permanently thereafter. It will not be shared with other Cato Cloud users.
Default free global IP address

How to set a global IP address
Define how to use global IP addresses in Network Rules (rules that define communication).
The definition method is possible with the following source and application type.
- Source example
- group
- IP address
- IP address range
- Base
- VPN user
- Application type
- application
- Application category
- domain
- FQDN
- port range
- Services (DNS, FTP, etc.)
For example, with the following settings, it is possible to communicate with a fixed global IP address for all VPN users when accessing Box.
Box NAT Rules
- Source: All VPN users
- Application: Box

It is also possible to associate one global IP address with multiple rules.
For example, you can obtain a global IP address A and use this address A for the Box NAT Rule above and the O365 NAT Rule below.
Office365 NAT Rules
- Source: All VPN users
- Application: O365

Summary
Cato can provide up to 3 independent global IP addresses for contracted companies free of charge, so it is possible to support applications with source restrictions.
Cato Cloud is available for a 30-day trial. We hope that you will give Cato products a try.
Inquiry/Document request
Macnica Cato Networks
- TEL:045-476-2010
- E-mail:cato-sales@macnica.co.jp
Weekdays: 9:00-17:00