The Network for Whatever’s Next

The world’s first SASE platform converging SD-WAN and

security into the cloud
Company Facts

Shlomo Kramer, CEO Gur Shatz, President & COO

(Check Point, Imperva) (Imperva, Incapsula)

$532M 500+ 70+

$2.5B Valuation Employees PoPs

1,100+ 17,000+ 300,000+ 150+

Customers Branches and clouds Remote Users Countries

246% ROI & Payback <6 months according to

|2
Networking and Security Complexity is Exploding with Point Solutions

Cloud

Mobile
Global VPN/SDP Mobile
Branch Users
Network
Security

DC Branch
MPLS

Legacy Network
|3
The Emergence of Convergence
With the Secure Access Service Edge (SASE)

“ Customer demands for simplicity,

scalability, flexibility, low latency and
pervasive security force convergence of
the WAN edge and network security
markets”.

Market Trends: How to Win as WAN Edge and Security

Converge Into the Secure Access Service Edge, 2019

“ Cato is the first SASE platform

built from the ground up with broad
set of capabilities which resonates with
mid-market and enterprise customers.”
|4
Cato Cloud is the World’s First SASE Platform
Converged. Cloud-Native. Global. All Edges.

Mobile
VPN/SDP

Converged
Networking and
Security
NGFW
UTM

Global Backbone

“ SASE services will converge a number of disparate network and network security services
including SD-WAN, secure web gateway, CASB, SDP, DNS protection and FWaaS”.

Hype Cycle for Enterprise Networking 2019

|5
Cato SASE Cloud: Global Private Backbone of 70+ PoPs

|6
Cato SASE Cloud: The World’s First SASE platform

Networking Security
Cloud Optimization Firewall-as-a-Service
WAN Optimization Secure Web Gateway
Single Management
Global Route Optimization IPS & NG Anti-Malware
• Full visibility and control
Dynamic Carrier Selection Cloud Access Security Broker • Policy configuration
• Analytics and events
• Self-service AND managed service
SaaS-aware Cloud DC Integration
Egress (IPsec, Cato vSocket)
Converged
Networking Cato
PoP
and Security

MPLS/Internet
IPsec
Policy based routing

Cato Socket Cato SDP

Edge SD-WAN Device Client & Clientless
Branch • Active / Active / Active Datacenter Remote/Mobile
• Dynamic Path Selection
• Application- and Identity Aware QoS
• Packet Loss Mitigation

|7
Network as a Service

|8
Cato Socket
Intelligent, Zero Touch, SD-WAN Devices

Specification X1500 X1700

W:165mm x D:105.5mm x H: 43mm

Dimension 1U
(dual rack mount available)

CPU Board Intel® Atom™ processor Intel® 4th Generation Core™ Processors

System Memory 4GB DDR 8GB DDR, up to 32GB

Storage Device 16G of Micro SD class 10 2 X 320G (swappable, redundant)

Ethernet Port 4 x 1GbE 8 x 1GbE + Management Port

Expansion 4 x 1GbE, 2 x 1Gb Fiber, 2 x 10Gb Fiber

Power Supply 40W 12V power adapter Redundant (1+1) (300W)

Throughput 500 Mbps 2 Gbps

High Availability VRRP, PoP Orchestrated VRRP, PoP Orchestrated

|9
Enterprise Network Overview - Video

| 10
Security as a Service

| 11
Comprehensive Protection

Detect and block threats and breaches

NFGW SWG IPS NGAM DLP

Next Generation Secure Web Intrusion Prevention Next Generation Data Loss
Firewall Gateway System Anti Malware Prevention
including real-time zero-day Planned for H1 2022
malware prevention

| 12
 Security Research & SOC

Managed Detection and Response (MDR)

Brains
Cloud-scale Big Data / Machine Learning

External Feeds Internal Feeds Rules

Real Time Protection

Muscles
NextGen
NG Firewall SWG/URLF CASB IPS
Anti-Malware

Full/Selective TLS Decryption

Architecture
• Scalable and elastic
• Single-point decryption and DPI
• Globally distributed, centrally managed
Intelligence
• Service-wide traffic visibility
• Rich context for every network flow
• Automated and verified threat hunting
| 13
CASB – Shadow IT Dashboard

| 14
CASB Analytics

| 15
SASE Is Here

By 2025, at least 60% of

enterprises will have explicit
strategies and timelines for SASE
adoption, encompassing user,
branch and edge access. ”

| 16
Cato SASE Cloud : SASE Subscription & Licensing
No End of Sales - No End Of Life - No End of support – No maintenance

Per connected Sites (Branch, DC, DC Cloud, HQ, 3rd VPN Partner)
Per Bandwidth range (25,50,100,200,300Mbps,etc.. and up to 2Gbps)

| 17
The Cato SASE Edge
Land and Expand Global Coverage

Side by Side Single Pane of Glass

A-la-carte Single Point of Contact

Managed and Professional

Services Completeness Cato One Solution To Troubleshoot

Near-zero Upfront Investment

SASE MPLS Replacement

Low OPEX Remote Access

Customer Satisfaction Security as a Service

Fast Time to Market Cloud Access

| 18