# Cato Networks

## Cato Networks

The Dropzone platform integrates with [Cato Networks](https://www.catonetworks.com/), a cloud-native Secure Access Service Edge (SASE) platform that provides capabilities such as SD-WAN, secure web gateway (SWG), firewall-as-a-service (FWaaS), zero trust network access (ZTNA), and cloud access security broker (CASB).

By integrating with Cato Networks, Dropzone AI can leverage network and VPN telemetry to enhance security investigations by analyzing network traffic associated with alerts, identifying devices behind IP addresses, and correlating user and VPN activity across the environment.

## Obtain Account ID and API Key

Cato Networks requires an Account ID and an API key to enable. You will need access to an account administrator with the Editor privilege to generate keys.

To locate your Account ID, do the following:

* Log in to your Cato Networks account
* In the URL, locate the four-digit integer and copy it for use later in the Dropzone UI where it is called "Account ID"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-3ceb98482bab3e337f0fbd92fe94f4e6e901a501%2Fcato-networks-1.png?alt=media" alt=""><figcaption><p>The Account ID</p></figcaption></figure>

To generate an API key, do the following:

* In the upper banner of your Cato Networks homepage, click "Administration"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-4bbe8eb1855dce5d4e0623ed22abd7f9de1e101f%2Fcato-networks-2.png?alt=media" alt=""><figcaption><p>Navigate to "Administration"</p></figcaption></figure>

* In the right, click "API Management"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-ae548e740b5798e1d4963c356c08bf34031e1572%2Fcato-networks-3.png?alt=media" alt=""><figcaption><p>Click "API Management"</p></figcaption></figure>

* Click "\* New"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-ea4bd2832c3a1ae4f78109b5f593b2e049d99387%2Fcato-networks-4.png?alt=media" alt=""><figcaption><p>Click New</p></figcaption></figure>

* Name the API key something memorable, such as Dropzone AI
* Under "API Permission," click "View"
* Under "Allow access from IPs," click "Any IP"
* If you wish, assign the API key an expiration date
* Click "Apply"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-73b8dd03eff2771c941bfad9a9b20abc3237da47%2Fcato-networks-5.png?alt=media" alt=""><figcaption><p>Create New API Key</p></figcaption></figure>

* Copy the API key shown for use later in the Dropzone UI where it is called "API Key"

### Enable Cato Networks

To enable the Dara Source integration, you will need the following information:

| Dropzone Field         | Source                                                                 |
| ---------------------- | ---------------------------------------------------------------------- |
| Cato Networks API FQDN | The FQDN of your Cato Networks API instance, e.g. api.catonetworks.com |
| Account ID             | The Account ID value you copied earlier                                |
| API Key                | The API key value you copied earlier                                   |

* Navigate to your Dropzone AI tenant home page e.g. https\://*mycompany*.dropzone.app
* In the bottom left hand corner, navigate to Settings > Integrations

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-b3f07f902b1402dadc7abbd8bb62f9c204547390%2Fui-integrations-dropdown.png?alt=media" alt=""><figcaption><p>Integrations Dropdown</p></figcaption></figure>

* Click "Available"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-434641ec6d4e45051842f86164f485d6bd289424%2Fapp_system_integrations_available.png?alt=media" alt=""><figcaption><p>Click Available</p></figcaption></figure>

* In the Search bar, search Cato Networks, then click "Configure"

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-76906be316d6dd0a2d825c209db3371a90fba68a%2Fapp_system_integrations_available_Cato-Networks.png?alt=media" alt=""><figcaption><p>The Cato Networks tile</p></figcaption></figure>

* Under the Alert Source heading, input the Cato Networks API FQDN, Account ID and API Key

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-133a1403709b11d390fab9c8595f8e0c9b95f418%2Fapp_system_integrations_available_Cato-Networks-alert-config-1.png?alt=media" alt=""><figcaption><p>The Cato Networks Data Configuration (pt 1)</p></figcaption></figure>

* In the Action Filter section, select the events you want Dropzone to ingest

{% hint style="info" %}
Cato Networks assigns actions to each event that occurs in your account, which Dropzone then uses to filter. For more information, click [here](https://support.catonetworks.com/hc/en-us/articles/5131416221085-Understanding-Event-Fields)
{% endhint %}

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-ece9bc26c3220c868dccd16cfcb3926c93688c60%2Fapp_system_integrations_available_Cato-Networks-alert-config-2.png?alt=media" alt=""><figcaption><p>The Cato Networks Data Configuration (pt 2)</p></figcaption></figure>

* Input your desired poll interval and lookback
* Click "Test & Save" to finish

<figure><img src="https://435022081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FmBVcKuiytGCsIDpL70BC%2Fuploads%2Fgit-blob-c4fcef1399d53f9157708aca4aab719f9f464939%2Fapp_system_integrations_available_Cato-Networks-alert-config-3.png?alt=media" alt=""><figcaption><p>The Cato Networks Data Configuration (pt 3)</p></figcaption></figure>

If you have any errors engage your Dropzone AI support representative.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.dropzone.ai/integrations/alert/cato-networks_alert.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
