Cato VPN Client for Windows

Installation and User Guide

Document Version 3.0

January 2020

Released
 Cato VPN Client for Windows Installation and User Guide

© C OPYRIGHT 2020 BY C ATO NETWORKS L TD

This document and all of its content, design and structure, and all trademarks, trade names and logos herein, and all intellectual property rights
thereto are owned by Cato Networks Ltd and its affiliates and licensors and are deemed as Cato Networks Ltd's confidential information and may
not be copied, disclosed to third parties, made available to the public or distributed. This document and all data herein are provided "as is" and
without warranties of any kind, either express or implied. All technical data herein is subject to U.S., Israeli and possibly other countries’ export
control and sanctions laws, regulations and requirements. You have sole liability and responsibility to obtain all permits and licenses required for
export or re-export of this document. This document and its use are subject to the agreement entered between you and Cato Networks Ltd, and
you shall destroy all copies thereof upon expiration or termination of said agreement.

Cato Networks 2
Released
 Cato VPN Client for Windows Installation and User Guide
1. Scope

Table of Contents
1. Scope 3
2. Downloading Your Client for Installation 3
3. Installing the Cato VPN Client for Windows 4
4. Logging in to Your Cato VPN Client 8
4.1 Logging in with the Cato Configuration File 9
4.2 Logging in with User Credentials 11
4.3 Logging in with SSO 12
5. Using the VPN Client 13
6. Connecting/Disconnecting Your VPN 15
6.1 Temporarily Bypassing Your VPN Connection 18
7. Viewing Connection Statistics 19
8. Configuring the Connection Settings 21
9. Displaying the Cato VPN Client Version 22
10. Defining and Connecting to Different User Accounts 23
11. Additional Resources 29

1. Scope
This guide describes how to download, install and use the Cato VPN Client on your Windows
device.

If the VPN client is already installed on your PC, skip to Section 4 - Logging in to Your Cato
VPN Client

2. Downloading Your Client for Installation

In addition to downloading the Cato VPN Client installation file, you can optionally download a
profile file that contains your configuration credentials, and enters your login details
automatically.
However, if you prefer, you can enter your credentials manually.

Cato Networks 3
Released
 Cato VPN Client for Windows Installation and User Guide
3. Installing the Cato VPN Client for Windows

1. Click Windows then click 1. DOWNLOAD VPN

CLIENT. The setup file is downloaded to your
device.

2. Optional - Click 2. DOWNLOAD PROFILE and

note where you saved the file for later use.

3. Installing the Cato VPN Client for Windows

After you download the installation file, run the InstallShield Wizard to install the Cato VPN Client
on your PC. If you are upgrading to the most recent client version, make sure to exit and close the
current Cato VPN Client before you open the installation file.
To install the Cato VPN Client:
1. Open the installation file setup.exe.

If a system warning appears asking if you want to allow this app to make changes to your
device, click Yes.

Cato Networks 4
Released
 Cato VPN Client for Windows Installation and User Guide
3. Installing the Cato VPN Client for Windows

The following window opens. Wait a few moments for the installation wizard to continue.

2. Click Next.

Cato Networks 5
Released
 Cato VPN Client for Windows Installation and User Guide
3. Installing the Cato VPN Client for Windows

3. Click I accept the terms in the license agreement and click Next.

4. To change the destination folder for the installation, click Change and select a different
folder. Otherwise, click Next to install to the default location.

Cato Networks 6
Released
 Cato VPN Client for Windows Installation and User Guide
3. Installing the Cato VPN Client for Windows

5. Click Install.

6. When the following window appears, click Finish.

The Cato VPN Client is installed on your PC.

Cato Networks 7
Released
 Cato VPN Client for Windows Installation and User Guide
4. Logging in to Your Cato VPN Client

4. Logging in to Your Cato VPN Client

When you start Cato VPN Client for the first time, select the login option for the correct
authentication method for your organization. You can choose to use on the these methods to enter
your login credentials for the client:
● Configuration file - You can download this file from the User Portal and it automatically
enters your VPN credentials
● Enter credentials - Manually enter your VPN credentials
● Use your corporation identity - Use the Microsoft or Okta user name and password with SSO
(Single Sign-on) to supply your VPN credentials

Cato Networks 8
Released
 Cato VPN Client for Windows Installation and User Guide
4. Logging in to Your Cato VPN Client

4.1 Logging in with the Cato Configuration File

Use the configuration file that you downloaded from the User Portal to log in to the Cato
VPN Client.
To use the Cato configuration file for VPN credentials:
1. Open the Cato VPN Client.
2. In the Enter your credentials window, click Configuration file.

Cato Networks 9
Released
 Cato VPN Client for Windows Installation and User Guide
4. Logging in to Your Cato VPN Client

The Cato Client: Open credentials file window opens.

3. Navigate to the location of the configuration file you downloaded in Section 2 - Downloading
Your Client for Installation
4. Click Open.
The Please Note warning window opens.

5. We recommend that you click DELETE to automatically delete the VPN configuration file after
the installation process completes.
Clicking NO THANKS to keep the VPN configuration file represents a potential security risk.
The Cato VPN Client opens.

Cato Networks 10
Released
 Cato VPN Client for Windows Installation and User Guide
4. Logging in to Your Cato VPN Client

4.2 Logging in with User Credentials

Enter your user name and password to log in to the Cato VPN Client.
To enter your user credentials for the VPN client:
1. Open the Cato VPN Client.
2. In the Enter your credentials window, enter these settings for the VPN client:
■ Account
■ User name
■ Password

Cato Networks 11
Released
 Cato VPN Client for Windows Installation and User Guide
4. Logging in to Your Cato VPN Client

3. Click Continue.
The Cato VPN Client opens.

After six consecutive failed login attempts, you are locked out of your account for at least
30 minutes. You can also ask your administrator to unlock your account earlier.

4.3 Logging in with SSO

Enter your user name and password for Microsoft or Okta SSO (Single Sign-on) to log in to the
Cato VPN Client.
To use corporate identity SSO to log in the VPN client:
1. Open the Cato VPN Client.
2. Click Use Your Corporate Identity.

3. Click Sign in.

Cato Networks 12
Released
 Cato VPN Client for Windows Installation and User Guide
5. Using the VPN Client

The SSO window opens in your Internet browser.

4. Select the SSO service that your company uses: Microsoft or Okta.
5. Enter your corporate credentials.
After successful authentication, you are connected to the Cato VPN Client.

You will need to reauthenticate to the Cato VPN Client VPN periodically according to your
organization's policy.

5. Using the VPN Client

The Cato VPN Client lets you connect and disconnect to the VPN tunnel for your corporate
network. This section explains each of the menu options for the Windows client.

Cato Networks 13
Released
 Cato VPN Client for Windows Installation and User Guide
5. Using the VPN Client

● - Connect and disconnect the VPN client and shows your user name and account

● - Shows detailed statistics for the VPN connection

● - Manage and change VPN user profiles

● - Advanced settings for the Cato VPN Client

● - Shows the version of the Cato VPN Client

Cato Networks 14
Released
 Cato VPN Client for Windows Installation and User Guide
6. Connecting/Disconnecting Your VPN

6. Connecting/Disconnecting Your VPN

If your organization has implemented a Never off VPN connectivity policy, your VPN client is
always connected. In this case, the Connect and Disconnect actions described in this section
are not available.
Some organizations let users temporarily bypass the VPN policy, as described in Section 6.1 -
Temporarily Bypassing Your VPN Connection

To connect to the VPN:

1. In the Cato VPN Client, click .

2. Click the VPN client button.

Cato Networks 15
Released
 Cato VPN Client for Windows Installation and User Guide
6. Connecting/Disconnecting Your VPN

3. The connection status changes to Connected to indicate that your PC is connected to the
corporate VPN network.

Cato Networks 16
Released
 Cato VPN Client for Windows Installation and User Guide
6. Connecting/Disconnecting Your VPN

To disconnect your PC from the VPN:

1. In the Cato VPN Client, click .

2. Click the VPN client button.

Cato Networks 17
Released
 Cato VPN Client for Windows Installation and User Guide
6. Connecting/Disconnecting Your VPN

3. The connection status changes to Disconnected.

6.1 Temporarily Bypassing Your VPN Connection

If your organization implements a Never off VPN connectivity policy, you can temporarily bypass
the VPN by requesting an OTP (One Time Password) from your administrator. Enter the OTP to
bypass the VPN connection for up to 15 minutes.
After 15 minutes, the VPN client automatically exits bypass mode and returns to the VPN
connection. You can also choose to manually exit bypass mode before the 15 minutes have
elapsed.
To temporarily bypass the VPN connection:
1. Contact your organization's admin, and request a 6 digit OTP.
2. From the system tray, right-click the Cato Networks VPN icon and click Temporary Bypass.

Cato Networks 18
Released
 Cato VPN Client for Windows Installation and User Guide
7. Viewing Connection Statistics

The Verification code window opens.

3. Enter the OTP in 6 digits code.

4. Click Enter.
The tray icon changes from green to blue to indicate that the VPN client is in bypass mode.
To manually exit VPN bypass mode:
1. From the system tray, right-click the Cato Networks VPN icon and click End Temporary
Bypass.

2. The tray icon changes from blue to green to indicate that the VPN client is connected again.

7. Viewing Connection Statistics

To view detailed statistics on your VPN connection:

Cato Networks 19
Released
 Cato VPN Client for Windows Installation and User Guide
7. Viewing Connection Statistics

1. In the client, click .

The following table describes the fields in the Statistics window.

Parameter Description
Status Connection status of the client
Bytes sent Total number of bytes sent over the VPN connection since it was con-
nected
Bytes received Total number of bytes received over the VPN connection since it was
connected
Local IP IP address of the host in the local wired or wireless network
Cato IP IP address assigned by Cato Networks

Cato Networks 20
Released
 Cato VPN Client for Windows Installation and User Guide
8. Configuring the Connection Settings

Parameter Description
Connected PoP The Cato PoP to which this VPN is currently connected
Distance To PoP Latency measured between this VPN client and the connected Cato PoP
Session start time Date and time when this VPN session was established
Last active The data and time when the latest packet was transferred in this VPN
session
Connected via office Shows if the client is using the site's connection to the Cato Cloud
DNS resolution The DNS status for the client
Port 443 available Shows if the client can use port 443 for HTTPS traffic
Port 53 available Shows if the client can use port 53 for TCP and UDP traffic

8. Configuring the Connection Settings

You can configure advanced Connection Settings to the Cato VPN Client.
To configure the Connection Settings:

1. In the client, click .

Cato Networks 21
Released
 Cato VPN Client for Windows Installation and User Guide
9. Displaying the Cato VPN Client Version

2. Configure the settings as described in the following table.

Item Description
Connect at startup Select to automatically connect to your VPN when Windows starts.
If selected, you can also select Start Minimized to keep the VPN
client minimized in the taskbar.

If your organization has implemented a Never off VPN

connectivity policy, these two options are always selected.

Upload Split Tunnel You can define which traffic can bypass the VPN connection in a file
Configuration that you upload. There are two types of rules that you can define in
the file:
(Only appears if enabled ● Exclude - traffic to the IPs defined in an Exclude rule are routed
by your organization). directly to the internet. All other traffic is routed through the
VPN connection.
● Include - traffic to the IPs defined in an Include rule are routed
through the VPN connection. All other traffic is routed directly to
the internet.
The file must also define the IP addresses and masks for the rule, as
shown in the following examples:
exclude
8.8.8.8,255.255.255.255
10.10.10.10,255.255.255.255
or
include
9.9.9.9,255.255.255.255
11.11.11.11,255.255.255.255

To enable split tunnel configuration for the client:

1. Click Upload.
2. Navigate to the split tunnel definition file and click Open.
3. Select Enable split tunnel.

9. Displaying the Cato VPN Client Version

To show the version for the Cato VPN Client:

Cato Networks 22
Released
 Cato VPN Client for Windows Installation and User Guide
10. Defining and Connecting to Different User Accounts

1. In the client, click .

The About window opens and shows the version number.

10. Defining and Connecting to Different User Accounts

You can define multiple Cato VPN Client user profiles and quickly switch between them to use
different VPN user accounts to connect to the VPN.
You can only configure the VPN user accounts when the client is disconnected from the VPN.
The default behavior for the Cato VPN Client is to automatically connect to the nearest available
PoP. You can also manually configure the IP address of the PoP that the client connects to.
To change to a different user account:

Cato Networks 23
Released
 Cato VPN Client for Windows Installation and User Guide
10. Defining and Connecting to Different User Accounts

1. From the client, click .

2. From the Users window, select the user profile.

3. Click , and connect to the VPN with the new user.

To add a VPN user profile:

Cato Networks 24
Released
 Cato VPN Client for Windows Installation and User Guide
10. Defining and Connecting to Different User Accounts

1. From the Users window, click the new button .

2. Follow the steps described in Section 4 - Logging in to Your Cato VPN Client

Cato Networks 25
Released
 Cato VPN Client for Windows Installation and User Guide
10. Defining and Connecting to Different User Accounts

3. To configure manual PoP mode for a user account:

a. Select the user.

b. Click the slider to enable Manual PoP selection.

c. Enter the IP address for the PoP.
To edit an existing account:

Cato Networks 26
Released
 Cato VPN Client for Windows Installation and User Guide
10. Defining and Connecting to Different User Accounts

1. From the User window, click the account you want to edit.

2. Click the edit button .

The Edit user window opens.

Cato Networks 27
Released
 Cato VPN Client for Windows Installation and User Guide
10. Defining and Connecting to Different User Accounts

3. Follow the steps described in Section 4 - Logging in to Your Cato VPN Client.

To delete an account:

Cato Networks 28
Released
 Cato VPN Client for Windows Installation and User Guide
11. Additional Resources

1. Click the name of the account you are deleting.

2. Click the delete button .

The Delete user window opens.

3. Click Delete.

11. Additional Resources

Online documentation
Online documentation is available through the Cato Management Application.

Cato Networks 29
Released
 Cato VPN Client for Windows Installation and User Guide
11. Additional Resources

Contact Support
Following are the channels for contacting Cato Networks Support:

l Cato Networks Support Portal: A self-service support web site that offers a full
range of customer support features, such as: Opening, updating and tracking
technical support incidents quickly and conveniently. Finding technical doc-
uments, FAQs, using the new and robust Knowledge Base. Downloading doc-
umentation, full products guides, product updates, notifications etc. Sharing best
practices and troubleshoot problems with others via tan interactive community.
Access Cato Networks Online Support, by browsing https://sup-
port.catonetworks.com and register your support account.
l Email: Email services, allowing you to create technical tickets in our system eas-
ily, by sending email to [[email protected]](sup-
[email protected]).
l Chat: Chat services are part of Cato Management Application, after login you
have the option to chat with a Technical Support Engineer representatives based
on an available free seat.
l Phone: Talk Services, 24x7x365, allowing you to call directly to Cato Support. All
calls are recorded to further improve our services and for quality assurance pur-
poses.
USA: +1 (505) 333-4070
United Kingdom: +44 114 303 3899
Israel: +972 3 720 7171
l Text message: To create support tickets with Cato Networks, text your inquiry to
the following text message numbers:
USA: +1 (201) 890-7666
United Kingdom: +44 1606 800066
Israel: +972 52 628 5630

Cato Networks 30
Released