Hibank Replaces Legacy VPN with Zscaler Zero Trust

Name: Hibank Replaces Legacy VPN with Zscaler Zero Trust
Uploaded: 2026-06-28T12:39:12-04:00
Duration: 3 min 21 s
Description: Hibank, an Indonesian digital bank serving micro, small, medium businesses has its sights set on expanding to new markets. CISO Lim Siaw Liang knew that it was quickly outgrowing its legacy infrastructure consisting of VPN, network access control (NAC)...

Zscaler

06/28/2026

0 (0%)

Report Like Favorite

Transcript

to delivering secure innovation and user-friendly financial services. When traditional VPN, the traffic itself will be centralized in the data center, and then we need another tool to secure our environment within the head office and the branch using the NAC, while in Zscaler, all of the features are sitting under one tool. In HiBank, our size is only 600, and then the security operation here is less than 5% to manage the overall cybersecurity tools within the bank. So now in HiBank, we totally rely on Zscaler to do our operational things, not only for supporting for the back office, but also the front office. So with Zscaler, we can open a branch in anywhere where the marketing can do customer acquisition, not only on our branch. After that, we extend to the DLP part, where Zscaler is helping HiBank to cover DLP endpoint, DLP email, Caspi. We do a full suite DLP of Zscaler. So where we can do an application limitation on each row in the bank, we can avoid sort of like a lateral movement on each endpoint within the bank. So we can eliminate attack for sure as well, basically from the external, where usually on the traditional part, we must publish the IP public to the external, where usually attacker use that kind of IP public to discover and then try to penetrate the bank. With Zscaler, attack surface, we don't need to worry because they're doing a proxy there. So any attacker, they don't know the exact IP address or original IP address behind the VPN. It is helpful for the GSOs like us to reduce a lot of noise or maybe recon from the attacker, especially for the SIM or our SOC. So we can focus on protecting our data center. In future, we are trying to explore the new VM and then the asset discovery of the Zscaler where currently the bank itself, we would like to have a real time maturity assessment where we can find the overall gap within the tools that we have. So we expect Zscaler can fill out this gap so we can identify on the fly the gap and then remediate the gap itself as soon as possible. You should try Zscaler. This product is very impressive. You can have a lot of features within a single console and then along with the cost efficiency, you can replace the traditional network topology and then the latency itself is very low and then you don't need to manage a lot of tools just to protect your endpoint. So your security operation can focus more on data center protection.

TL;DR

Hibank replaced legacy VPN and NAC infrastructure with Zscaler Zero Trust Exchange to reduce management burden on a five-person security team serving 600 employees
The bank implemented Zscaler's full DLP suite covering endpoints, email, and cloud applications with role-based access controls to prevent lateral movement
Zero trust architecture eliminated the need to expose public IP addresses, significantly reducing reconnaissance attempts and attack surface for the SOC team

Summary

Hibank, an Indonesian digital bank serving micro, small, and medium enterprises, faced significant challenges with its legacy security infrastructure consisting of VPN, network access control, and fragmented point products. With only five security personnel managing a 600-person organization, CISO Lim Siaw Liang needed a solution that would reduce operational complexity while enabling the bank's expansion into new markets. The bank consolidated its security stack on Zscaler's Zero Trust Exchange platform, implementing unified data security across endpoints, email, and cloud applications. This transformation eliminated the need to publish public IP addresses, reduced attack surface through application segmentation, and enabled flexible branch expansion without traditional network constraints. The bank is now exploring Zscaler's vulnerability management capabilities to gain real-time visibility into security gaps and accelerate remediation efforts.

Chapters

0:00 - Hibank's Digital Banking Mission
0:16 - Legacy Infrastructure Challenges
0:44 - Operational Efficiency Gains
1:05 - Data Loss Prevention Implementation
1:49 - Attack Surface Reduction
2:17 - Future Vulnerability Management Plans

Key Quotes

0:27 "In Zscaler, all of the features are sitting under one tool."
0:34 "In HiBank, our size is only 600, and then the security operation here is less than 5% to manage the overall cybersecurity tools within the bank."
1:49 "With Zscaler, attack surface, we don't need to worry because they're doing a proxy there. So any attacker, they don't know the exact IP address or original IP address behind the VPN."

FAQ

How did Zscaler help Hibank reduce its attack surface?

Zscaler eliminated the need to publish public IP addresses to external networks by acting as a proxy. This prevents attackers from discovering and targeting the bank's actual infrastructure, reducing reconnaissance attempts and allowing the SOC team to focus on protecting the data center rather than filtering external noise.

Categories:

Tags:

Show more Show less

Browse videos

Upcoming Webinar Calendar

11/18/2026

08:00 AM

11/18/2026

Hands-On Workshop: Connecting On-Prem Data to Databricks with MinIO AIStor (International)

https://www.truthinit.com/index.php/channel/2194/hands-on-workshop-connecting-on-prem-data-to-databricks-with-minio-aistor-international/
11/19/2026

01:00 PM

11/19/2026

Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
11/19/2026

01:00 PM

11/19/2026

Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
11/19/2026

01:00 PM

11/19/2026

AI Agent Showdown: Discover What Muse, Dots, and Duet Bring to Your Website

https://www.truthinit.com/index.php/channel/2228/ai-agent-showdown-discover-what-muse-dots-and-duet-bring-to-your-website/
12/02/2026

04:00 AM

12/02/2026

Skylight en acción: salvaguardando la IA más allá del usuario.

https://www.truthinit.com/index.php/channel/2147/skylight-en-acción-salvaguardando-la-ia-más-allá-del-usuario/
12/03/2026

01:00 PM

12/03/2026

CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era

https://www.truthinit.com/index.php/channel/2231/ciso-insights-steering-cybersecurity-strategies-in-an-ai-driven-era/
01/19/2027

04:00 AM

01/19/2027

Skylight in Aktion: Gewährleisten Sie KI-Schutz über den Benutzer hinaus

https://www.truthinit.com/index.php/channel/2176/skylight-in-aktion-gewährleisten-sie-ki-schutz-über-den-benutzer-hinaus/
01/19/2027

02:00 PM

01/19/2027

HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.

https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
03/18/2027

01:00 PM

03/18/2027

Securing Access for People, Partners and AI Agents

https://www.truthinit.com/index.php/channel/2251/securing-access-for-people-partners-and-ai-agents/
06/17/2027

01:00 PM

06/17/2027

Stop the Leak: Data Loss Prevention for the AI Era

https://www.truthinit.com/index.php/channel/955/360view-stop-the-leak-data-loss-prevention-for-the-ai-era/
08/19/2027

01:00 PM

08/19/2027

Who Has Access to What...and Should They?

https://www.truthinit.com/index.php/channel/2252/who-has-access-to-what-and-should-they/
10/21/2027

01:00 PM

10/21/2027

After VMware: Building the Private Cloud You Actually Want

https://www.truthinit.com/index.php/channel/2253/after-vmware-building-the-private-cloud-you-actually-want/
11/18/2027

01:00 PM

11/18/2027

Assume Breach, Prove Recovery

https://www.truthinit.com/index.php/channel/2254/assume-breach-prove-recovery/
12/16/2027

01:00 PM

12/16/2027

The Self-Running Service Desk

https://www.truthinit.com/index.php/channel/2255/the-self-running-service-desk/