What are the key features and functionalities of Layer 7 firewall and LAN Segmentation in Cato Cloud's network security architecture?

Layer 7 firewall is supported, for any traffic passed to the Cato Cloud.

The inspection takes place at the ingress PoP, providing full application awareness firewalling, URL filtering, IPS and advanced anti-malware.

LAN Segmentation: Cato NGFW supports the definition of LAN segments as part of the site context.

Cato supports several types of LAN segments:

• VLANs - VLAN tags are stripped as packets enter the Cato Cloud, then upon reentering the LAN the VLAN tag is re-applied
• Routed Range - LAN segments that are connected through a router into a Socket
• Direct Range - LAN segments that are directly connected to the Socket, not via a router, and are different than the site's native range By definition, no traffic is allowed between different segments. Allowing such connections requires the creation of local segmentation rules, enforced by the Cato Socket, or the creation of WAN firewall rules that are enforced by the Cato Cloud with full inspection of the traffic.

‍