How an Indonesian asset management firm created a single source of truth for connected devices, enforced access policy, and supported audit preparation in a regulated financial environment without disrupting operations.
An Indonesian asset management company adopted Genian NAC to replace manual device tracking with continuous network control. The on-premises deployment went live in January 2025 and covers about 100 nodes. The project also shows that NAC is not only for large enterprises. Even with about 100 nodes, the firm needed a reliable way to replace manual tracking with continuous network control.
Background: Securing a Regulated Financial Workplace
The firm handles client, portfolio, and transaction data in Indonesia’s regulated financial sector. Financial institutions in Indonesia, including firms overseen by the Financial Services Authority (OJK), are expected to manage IT risk, control access, and protect customer information.
Before adopting Genian NAC, the firm relied on manual records and disconnected sources to track corporate endpoints, employee laptops, mobile devices, guest access, and third-party connections. The issue was operational as much as technical: the IT team needed a faster way to confirm what was connected, whether each device met policy, and what evidence could be shown during an audit.
The firm needed a NAC platform that could fit the existing network, give the team one device record to trust, and support access decisions without creating a large deployment project.
Solution: Genian NAC — See First, Verify Next, Enforce by Policy
Genian NAC was deployed on premises alongside the existing network. Layer-2 sensing discovers and classifies devices as they connect, including devices without an agent. This gave the IT team a single source of truth for connected devices without replacing switches or redesigning the network.
For managed corporate endpoints, the Genian Agent adds software inventory, posture assessment, and compliance enforcement. This gave the firm two levels of control: agentless network visibility for every connected device and agent-based depth for endpoints it manages.
Key Capabilities and Operational Advantages
- Device discovery and classification: layer-2 sensing identifies connected devices and records where they appear on the network.
- Managed endpoint control: the Genian Agent records software inventory, checks endpoint posture, and enforces the organization’s security baseline.
- Deployment fit: the platform ran alongside the existing infrastructure without switch replacement or network redesign.
- Access policy enforcement: authorized and compliant devices are permitted; unknown, unmanaged, or non-compliant devices are handled according to policy.
- Audit evidence: centralized records of devices, access events, and policy status help the team prepare for internal reviews and regulatory audits.
Results: From Manual Effort to Continuous Control
The value was immediate: the IT team no longer had to depend on periodic manual checks to understand what was connected to the network. After go-live, device status, access events, and endpoint compliance data became part of a continuous operating process rather than a periodic inventory task.
- Trusted device record: the team gained a single source of truth for connected devices, reducing reliance on scattered manual records.
- Consistent access handling: unknown, unmanaged, and non-compliant devices could be detected and managed through defined policy.
- Endpoint baseline checks: managed endpoints could be assessed for software inventory and posture before receiving the intended level of access.
- Compliance support: device, access, and policy records help streamline audit preparation and support OJK-aligned IT risk-management practices.
- Right-sized NAC for a focused environment: the deployment covered about 100 nodes, showing that enterprise-grade network control can be practical for smaller financial institutions with lean IT teams.
Local Partnership and Responsive Support
Genians, together with its local partner PT. Prospera Aswindra Teknologi, supported the evaluation, deployment, and post-deployment tuning of Genian NAC. This collaboration helped align the implementation with local requirements and enabled a smooth transition from deployment to production.
Summary: A Foundation for Secure, Compliant Growth
By deploying Genian NAC, the firm moved from manual device tracking to continuous network control. It now has a practical foundation for device visibility, policy enforcement, endpoint compliance, and audit support in a regulated financial environment.
