Cato SASE Cloud Platform
The converged platform that delivers networking and security from Cato's cloud through one single-pass inspection engine, one data lake and one management application.
Partner solutions
Cato Networks Australia: authorised partner for Cato SASE
Cato Networks delivers SASE as one cloud service: SD-WAN, a private global backbone and a full network security stack. TOM SHAW is an authorised Cato Networks partner that supplies, implements, integrates and supports Cato across Australia.
SASE: converged networking and security
What Cato Networks does
Cato Networks delivers SASE as a single cloud service: SD-WAN, a private global backbone and a full network security stack, run on one engine with one management console. Branches, data centres, cloud and remote users connect to the same platform, so policy and inspection apply consistently wherever people work, including controls for the safe use of AI.
- SD-WAN and a private global backbone for sites, cloud and remote users
- Firewall as a service, secure web gateway, IPS and anti-malware in one engine
- Zero trust network access for office, home and contractor users
- CASB and data loss prevention for SaaS, web and private applications
- Extended detection and response across network and endpoint events
More about the platform on the Cato Networks website.
Buy on AWS Marketplace Implement and Support Cato Networks on AWS Marketplace
Cato Networks products we supply and implement
Cato SD-WAN
Connects branches, data centres and cloud through Cato Socket edge devices or virtual sockets, routing traffic over Cato's private backbone with zero-touch deployment.
Cato SSE 360
Cato's security service edge: FWaaS, SWG, IPS, anti-malware, DNS security, remote browser isolation, CASB, DLP and ZTNA under one policy.
Cato Universal ZTNA
Applies one risk-based access policy to every user, with access via the Cato Client, Cato Enterprise Browser, browser extension or clientless portal.
Cato XDR
Groups security events into incidents using AI and behaviour analytics, mapped to MITRE ATT&CK, with an endpoint agent available for EDR and an optional managed service.
Cato AI Security
Built on the acquired Aim Security technology, it governs employee use of AI tools, protects homegrown AI applications and sets guardrails for AI agents.
What Cato Networks helps with
Replacing MPLS and branch firewall appliances
Cato SD-WAN and FWaaS connect and protect every site from the cloud, removing the need to patch and refresh separate appliances at each location.
Secure access for a hybrid workforce
Universal ZTNA applies the same policy to staff in the office, at home or on the road, and supports unmanaged devices through its enterprise browser.
Controlling SaaS and generative AI use
CASB and DLP reveal shadow IT and protect sensitive data, while Cato AI Security monitors and governs how employees and agents use AI tools.
Implement Cato Networks in Australia with TOM SHAW
From licensing to long-term support, one Australian partner looks after your Cato Networks deployment.
Supply and licensing
Buy Cato Networks through an Australian partner, with licensing sized to what you actually need.
Implementation
We plan and deploy Cato Networks in your environment, configured for your risks rather than left on defaults.
Integration
We connect Cato Networks with the rest of your security stack, including Noble1, so its signals feed one view of human and machine risk.
Support
After go-live we support Cato Networks: tuning, upgrades, health checks and help when you need it.
More from TOM SHAW
Cato Networks in Australia: common questions
What is Cato SASE?
Cato SASE is Cato Networks' cloud service that brings SD-WAN networking together with security functions such as firewall, secure web gateway, CASB, DLP and ZTNA, run on one engine and managed from one console.
What is Cato SSE 360?
SSE 360 is Cato's security service edge offering. It includes firewall as a service, secure web gateway, IPS, anti-malware, DNS security, remote browser isolation, CASB, DLP and zero trust network access.
Does Cato secure the use of AI tools?
Yes. Cato acquired Aim Security in 2025 and has since released Cato AI Security, which brings that technology into the Cato platform to secure the use of AI tools, AI applications and AI agents.
Did Cato Networks acquire Aim Security?
Yes. Cato acquired Aim Security in 2025 and has since released Cato AI Security, which brings Aim's technology into the Cato platform to secure the use of AI tools, AI applications and AI agents.
Does Cato Networks have PoPs in Australia?
Yes. Cato's published list of Points of Presence (PoPs) in the Cato Cloud includes four locations in Australia. Sites and remote users connect over encrypted tunnels to the nearest Cato PoP, where networking and security processing take place, so Australian traffic does not need to be sent overseas for inspection.
Can Cato keep traffic inspection within Australia?
Cato offers geo-fencing for its SASE services: administrators can set policy so that traffic is processed only by regional PoPs, which keeps inspection and security enforcement in-region. Cato states that customer policy, configuration and event data stays within the region selected for the account, so the management region should be chosen as part of planning for data residency requirements.
What is a Cato Socket?
A Cato Socket is the edge device that connects a physical site, such as a branch office or data centre, to the Cato Cloud. It builds encrypted tunnels to the nearest Cato PoP over the internet links the site already has, such as broadband, fibre or cellular, and is managed centrally. Sockets come in hardware and virtual forms.
Can Cato connect AWS and Azure workloads?
Yes. A virtual Socket (vSocket) runs in an AWS VPC or an Azure VNet and connects that cloud environment to the Cato Cloud as a site. Cato documents high-availability pairs of vSockets in both clouds, and publishes Terraform modules that deploy vSockets, including high-availability designs and AWS Transit Gateway attachment.
What is the Cato Client?
The Cato Client is a lightweight software agent that connects an individual user to the Cato Cloud through an encrypted tunnel to the nearest PoP, so remote users get the same security policy as users at a site. It runs on Windows, macOS, Linux, iOS, Android and Chromebook, and can be rolled out to managed devices with an MDM.
Is TOM SHAW a Cato Networks partner in Australia?
Yes. TOM SHAW is an authorised Cato Networks partner in Australia. We supply, implement, integrate and support Cato Networks for Australian organisations.
Can TOM SHAW implement Cato Networks for us?
Yes. We plan, deploy and configure Cato Networks in your environment and integrate it with your existing security tools, including Noble1, so its signals feed one view of human and machine risk.
Do you support Cato Networks after it is deployed?
Yes. We support Cato Networks after go-live, including tuning, upgrades, health checks and help when you need it.
Can I buy Cato Networks implementation through AWS Marketplace?
Yes. TOM SHAW's Cato Networks implementation and support offering is listed on AWS Marketplace, so you can buy it through your AWS account.
Does Cato Networks work with Noble1?
Yes. Cato Networks integrates with Noble1, TOM SHAW's cyber risk platform, so its signals feed a single view of human and machine risk.
Talk to us about Cato Networks
Licensing, implementation, integration or support: tell us what you need and the TOM SHAW team will get back to you.
Talk to us about Cato NetworksOr call 1800 845 211 or email info@tomshaw.com.