Network access control for a global investment bank, at six-figure endpoint scale
A global investment bank deployed Rebasoft as its network access control platform for more than a decade, deciding in real time what could connect across its switches and routers in Europe, the Americas and Asia-Pacific.
- 173,000
- endpoint licences in use
- 1,349
- switches and routers onboarded in one country rollout
- 23
- appliances across three regions
- 10+
- years in production
The challenge
- Decide in real time which devices may connect to a very large global network, and block those that shouldn’t.
- Operate at scale: hundreds of thousands of endpoints and thousands of network devices across three regions.
- Keep pace with the bank’s own endpoint standards as Windows builds and device management evolved.
Our approach
- Rebasoft NAC on dedicated appliances in each region, with separate engineering environments for testing.
- Event-driven policy: DHCP and switch MAC-notification events evaluated as they happen, with non-compliant ports blocked.
- Agentless endpoint checks over WMI, extended with PowerShell-based polling built to the bank’s requirements.
- NetFlow application visibility alongside access control.
Delivered at scale
A national rollout
934 switches and 415 routers onboarded in a single country deployment, with switches moved into blocking mode in controlled stages.
A six-figure endpoint estate
Around 173,000 endpoint licences in use across the bank.
A global footprint
23 appliances across EMEA, APAC and the Americas, brought onto a single co-termed global support contract.
Built for the customer
New PowerShell polling delivered alongside WMI, so the bank could move to new Windows builds without losing coverage.
Tuned under load
Joint performance tuning with the bank’s engineers kept policy queues flowing through peak onboarding.
Shaped by the customer
Roadmap input from the bank’s network security product team fed directly into later releases.
The outcome: real-time control over what connects to a global banking network, enforced on existing switches and routers at six-figure endpoint scale.
Why it matters for financial services
Proven at bank scale
Hundreds of thousands of endpoints across three regions.
Works with what you have
Enforcement on existing switches and routers. No endpoint agents.
A long-term partner
A decade of capability built with the bank, from WMI checks to PowerShell and NetFlow.