WIXLIB

Cato ManagedServices & Support200250300LOW15035050HIGH

Cato’s Managed ServicesCato delivers a broad set of technologies and solutions, including SD-WAN connectivity, cloudconnectivity, mobile user optimization, and security services. All are all included seamlessly within theCato Cloud and are explicitly designed to be deployed and managed by IT teams themselves.For those organizations who prefer to outsource network management or simply require additionalassistance, Cato offers a range of managed services:Intelligent Last-Mile Management (ILMM)24 7 monitoring and management of last-mile ISPs.Managed Threat Detection and Response (MDR)Seamlessly extends internal threat detection capabilities tomonitor the network continuously for compromised,malware-infected endpoints.Hands-Free ManagementOffloads all change management tasks onto Cato or oneof its partners.All implementations come backed by Cato’s Global Support Services.For customers looking for help with their deployment and ongoing integration needs, Cato’sProfessional Services are available. All Professional Services are provided by Cato or its partnersand include Network Transformation Planning that identifies the optimal, lowest risk, deploymentmodel based on a deep understanding of your network; Rapid Site Deployment that helps withinitial site configuration and connection to the Cato Cloud; IT Staff Augmentation that providestrained networking and security engineers to augment resource constrained IT teams; and AdvancedTraining to maximize your Cato investment.T h e N e t w o r k f o r W h a t e v e r ’s N ex tCato Managed Services & Support2

Inside Cato’s Intelligent Last-MileManagement ServiceCato’s Intelligent LastMile Management (ILMM)Service monitors andmanages the completelast mile from the customerpremises to the Cato PoP,not just the ISP, worldwide.With SD-WAN, IT organizations must manage the last-mile connections forall offices. With each ISP comes different service levels, tools, culture, timezones, and languages. All of which can increase friction with daily networkoperations and present numerous troubleshooting challenges.Traditional last-mile tools and services are imperfect solutions for today’sdigital business. Monitoring tools add cost and complexity to IT teams’ alreadytaxed staff, requiring the skills and resources necessary to deploy probes,interpret the performance results, and manage the ISP’s resolution for truelast-mile management. Third-party management services typically relyon the router’s capabilities, which means they’ll miss signs of performancedegradation, such as spikes in latency, loss, and jitter.Cato's ILMM monitors the complete last-mile for brownout, or noticeableperformance degradation, and blackout detection. Once problems areidentified, Cato proactively works with the ISP to resolve them. Detailedreports identify the source of networking problems backed by extensive logs,shortening the time for ISPs to resolve problems. And while most last-milemonitoring services stop at the ISP’s premises, Cato’s ILMM monitors the linkfrom the Cato Socket through the ISP and all the way to the Cato PoP.The Cato NOCISP ACato SocketCato CloudISP BISP AISP BBranchCato manages the complete last-mile – from customer premises to the Cato PoPT h e N e t w o r k f o r W h a t e v e r ’s N ex tCato Managed Services & Support3

Cato Managed Threat Detection & ResponseThe Cost and Complexity of Threat DetectionDespite investment in firewalls and other prevention capabilities, attackerscontinue to penetrate enterprise networks. Any good security posture shouldinclude the presumption of infection. With the average dwell time exceeding100 days, identifying threats quickly is imperative. Unfortunately, that requiressignificant investment in expertise and technology. However, today’s skillsgap makes it challenging to staff a SOC with the expertise needed to identifycompromises inside your network.At the same time, traditional MDR services require installing dedicated softwareand hardware across the enterprise network to obtain full visibility to networktraffic. This deployment model makes these services costly and complex,creating a challenging barrier to deployment for many organizations.Managed Detection and Response Made EasyCato MDR bridges this gap by enabling enterprises to offload the resourceintensive and skill-dependent process of detecting compromised endpointsto the Cato SOC. For customers using Cato Cloud, the Cato SOC has instant,unobscured visibility to all traffic without deploying any additional networkprobes or software agents.DetectDatacenterBranchMobileCloudO CLOUDCATPredictRespondCATO MDRCato’s Managed ThreatDetection and Response(MDR) Service leverages theexpertise of Cato ResearchLabs to reduce dwell time —the time from compromiseto detection – minimizingyour risk exposure.PreventThe MDR service adds detection and response to the prediction and preventionalready delivered by Cato CloudT h e N e t w o r k f o r W h a t e v e r ’s N ex tCato Managed Services & Support4

Inside Cato's MDRCato automatically collects, indexes, and stores the metadata of every WAN and Internet traffic flowtraversing the Cato Cloud. Data aggregation and machine learning algorithms mine the full networkcontext of this vast data warehouse over time, detecting indicators at evasive malware across all customernetworks. Suspicious traffic flows are then assessed by security researchers at Cato Research Labs,alerting customers to active threats on their networks. Verified threats can be contained automatically byconfiguring customer network policies to block command and control (C&C) domains and IP addresses,or disconnect a compromised machine or user from the network.The Cato SOC will advise on the threat risk when identified, recommended remediation, and will follow upuntil the threat is eliminated. Every month, the Cato SOC issues a custom report summarizing all threatsdetected, their descriptions and risk levels, as well as impacted endpoints.Cato MDR includes a monthly audit report of all incidentsT h e N e t w o r k f o r W h a t e v e r ’s N ex tCato Managed Services & Support5

Cato’s Hands-Free Management ServiceCato’s Hands-FreeManagement Service letscustomers offload thefulfillment of network servicechanges onto Cato’s NOC.In today’s dynamic business environment, agility is critical to yournetwork. Enterprises depend on optimized access to applications anddata, on premises and in the cloud, and have an increasingly mobile,global workforce. Agility, simplicity and self-service are the essence ofthe cloud experience that is expected everywhere. But IT teams arealready overworked, and with tight budgets and staffing shortages, findingthe time and people to make even the most routine changes can be achallenge. While outsourcing daily management to a telco is an option, it’san expensive solution that typically means losing visibility, control, and theagility that is so essential.Cato’s Hands-Free Management Service fills this void, leaving networkmanagement changes to Cato or Cato partners, without compromisingon the visibility, control, and agility you need. Expert staff will perform allchanges to networking and security policies within defined Service LevelAgreements (SLAs). At the same time, our co-management models let youmake urgent changes yourself. In all cases, Cato maintains the underlyingCato Cloud platform, so customers never need to upgrade, patch, orotherwise maintain Cato software or hardware.The Hands-Free Management Service includes Moves,Adds, Changes, Deletes (MACDs) for things such as:ySetting, changing or removing networking, routingand security policiesyAdjusting Quality-of Service policesyManaging events and alerting policiesyManaging site and account configurationsT h e N e t w o r k f o r W h a t e v e r ’s N ex tCato Managed Services & Support6

Cato Professional ServicesCato’s ProfessionalServices team supportcustomers in whatevermanner necessary.Whether it’s help duringthe initial deployment,or ongoing supportand training, Cato hasthe necessary expertresources.Cato Professional Services address the breadth of challenges facing anyWAN transformation initiative. Specific services include:Network Transformation PlanningIdentify the optimal, least risky deployment model based on adeep understanding of your network. You will benefit from theexperience of thousands of deployments across hundreds ofdifferent network topologies.Site DeploymentHelp connect sites to the Cato Cloud and provide initial siteconfiguration. Services are priced at an attractive per-site flatfee for remote assistance. On-site site deployment assistance isavailable at an additional cost.IT Staff AugmentationAvailable for more complex networks or IT teams with resourceconstraints. Services are delivered under a detailed statementof work, with a defined project plan. The Professional Servicesteam is skilled at security policy settings, VPN user configuration,cloud optimization, application QoS, and other customintegrations.TrainingProfessional Services trains the IT team with the skills to get themost value out of Cato - including configuration, analytics, QoSoptimizations, security policies, alerts, and other features ofthe service.Cato’s Professional Services are delivered by expert engineers withknowledge across a wide variety of networking disciplines. All services canbe delivered remotely or on-site. Custom services may be purchased on anhourly basis or on a monthly retainer.T h e N e t w o r k f o r W h a t e v e r ’s N ex tCato Managed Services & Support7

Global Support ServiceWith all customerimplementations, Catoprovides comprehensivemanagement of theunderlying Catoinfrastructure, freeing ITfrom the software updatesand operational complexityof maintaining networkingand security infrastructure.“Follow the Sun” Global SupportCato Support provides 24x7x365 service though supportcenters distributed around the world, covering 5 different timezones. Customers can reach Cato via email or phone anytime –contact information is available on our support page at https://www.catonetworks.com/support/.Cato’s self-service support portal is available for networkmonitoring and management to identify and fix problems, or toopen support tickets when needed.Our global coverage and support management systems ensuresupport is available for all customers, regardless of location ortime zone.Designated Support EngineerCato’s Designated Support Engineer (DSE) offering providescustomers with custom support services delivered by anengineer with a deep understanding of the customer’senvironment. With a DSE, customers benefit from a single pointof contact for all support needs, expediting issue resolutionby reducing the need to communicate customer-specificinformation.Cato’s DSE Service includes up to six hours per week of theDSE’s time during the customer’s defined business hours. Afterhours support needs, or support requirements exceeding sixhours in a given week, will be addressed by Cato’s traditionalsupport queue. A replacement DSE will cover the absence of aprimary DSE.T h e N e t w o r k f o r W h a t e v e r ’s N ex tCato Managed Services & Support8