“Cato Agentic Threat Prevention starts from the premise that preventing AI-assisted attacks requires more than isolated alerts,” said Brian Anderson, global field CTO at Cato Networks, in an interview with Network World. “It uses Cato’s unified network and security context to build an understanding of each customer environment, including users and identities, devices, applications, assets, traffic patterns, security events, vulnerabilities, data activity, and threat intelligence.”
The platform correlates those data points to identify activity that might appear harmless on its own but could signal the early stages of a larger attack, according to Anderson. For example, downloading an administrative tool may not be suspicious in isolation, but when combined with factors such as the user’s role, the time of day, the download source, and other environmental exposures, the platform can predict likely next steps, including tool execution or lateral movement, and automatically apply preventive controls.
Cato SASE Cloud Platform runs on a private global backbone of more than 85 points of presence (PoP) connected via multiple SLA-backed network providers. The PoPs software continuously monitors the providers for latency, packet loss, and jitter to determine in real-time the best route for every packet. Cato applies optimization and acceleration to all traffic going through the backbone to enhance application performance and the user experience. To ensure all locations benefit, Cato optimizes traffic from all the edges and toward all destinations, on-premises and in the cloud.
