Site Search

Cato Networks

Cato Networks

Introducing how to prevent unauthorized login to the cloud using SASE

~Restrictions on source IP addresses for SaaS applications~

Introduction

With the increase in the use of the cloud by companies, there are an increasing number of cases where source IP addresses are restricted when accessing web resources and SaaS.

A global IP address is required for source IP address restrictions in these SaaS and web resources.

Cato Cloud acts as a proxy, so all communications that go through Cato Cloud are converted to Cato PoP (Point of Presense) IP addresses and communicated to the Internet.

For Cato Cloud

You can use up to 3 global IP addresses for free with Cato Cloud.

Furthermore, by purchasing additional global IPs, it is possible to use four or more global IP addresses.

Select one of the 75 or more PoPs in the world (as of October 2022) and issue the global IP address of that country.

Once a global IP address is obtained, it becomes unique to the customer and can be used permanently thereafter. It will not be shared with other Cato Cloud users.

Default free global IP address

Default free global IP address

How to set a global IP address

Define how to use global IP addresses in Network Rules (rules that define communication).

The definition method is possible with the following source and application type.

  • Source example
    • group
    • IP address
    • IP address range
    • Base
    • VPN user
  • Application type
    • application
    • Application category
    • domain
    • FQDN
    • port range
    • Services (DNS, FTP, etc.)

For example, with the following settings, it is possible to communicate with a fixed global IP address for all VPN users when accessing Box.

Box NAT Rules

  • Source: All VPN users
  • Application: Box
Cato でBox向けIPアドレスを設定してクラウドセキュリティを高める

It is also possible to associate one global IP address with multiple rules.

For example, you can obtain a global IP address A and use this address A for the Box NAT Rule above and the O365 NAT Rule below.

Office365 NAT Rules

  • Source: All VPN users
  • Application: O365
CatoでOffice365向けのIPアドレスを指定してセキュリティを高める

Summary

Cato can provide up to 3 independent global IP addresses for contracted companies free of charge, so it is possible to support applications with source restrictions.

Cato Cloud is available for a 30-day trial. We hope that you will give Cato products a try.

Inquiry/Document request

Macnica Cato Networks

Weekdays: 9:00-17:00