Cato Networks

Connection Requirements

1 - Account ID

The Account ID is the unique internal ID for your Cato Networks account. It is not shown in the Cato Management Application (CMA) interface. You can find it in the CMA URL. Example: For https://cc2.catonetworks.com/#!/26/topology, the Account ID is 26.

2 - Prefix

The prefix determines the API region: No prefix / cc.catonetworks.com: https://api.catonetworks.com/api/v1/graphql2 With region prefix (cc.us1.catonetworks.com): https://api.us1.catonetworks.com/api/v1/graphql2 Note: Don’t forget to include the cc. part when entering the prefix if required.

3 - API Key

The API Key is a token used to securely access the Cato Networks API. You can generate API Keys in the Cato Management Application (CMA) under Resources > Admin API Keys or Service API Keys. There are two types of API Keys: Admin API Key: Personal key tied to your CMA admin account. Used for your own API workflows and automation. Only you can create Admin API Keys for your account. Permissions are inherited from your admin roles (RBAC). Service API Key: Shared key used for system processes, automation, or third-party integrations. Not tied to an individual admin. Created via a Service Principal Admin, which separates API authentication from personal CMA logins. How to generate an Admin API Key: 1. Navigate to Resources > Admin API Keys. 2. Click New. The Create API Key panel opens. 3. Enter a Key Name. 4. (Optional) Select Downgrade to View to apply view-only permissions. 5. (Optional) Restrict access to specific IPs or IP ranges. Default allows any IP. 6. (Optional) Set an expiration date for the API key. Recommended for Edit permissions. 7. Click Apply. A pop-up will display the API Key value. Copy it to a secure location. 8. Click OK to close the pop-up. The value cannot be retrieved again. How to generate a Service API Key: 1. Navigate to Resources > Service API Keys. 2. Click New. The Create API Key panel opens. 3. Select the Service Principal associated with this key. 4. Enter a Key Name. 5. (Optional) Select Downgrade to View to apply view-only permissions. 6. (Optional) Restrict access to specific IPs or IP ranges. Default allows any IP. 7. (Optional) Set an expiration date for the API key. Recommended for Edit permissions. 8. Click Apply. A pop-up will display the API Key value. Copy it to a secure location. 9. Click OK to close the pop-up. The value cannot be retrieved again.

4 - HTTPS Proxy

Proxy URL (optional).

5 - Timeout

The amount of time (in seconds) to wait for API responses. (default: 30)

Attention

Please perform a connection test to ensure there is a valid connection to the Cato Networks host. When the discovery operation is finalized you will be able to see the details on Assets page.