How a Centralized Network Policy Solved Security Management for China Construction Bank

“Where is the safest place to keep money?” The common answer is “in a bank,” but recent incidents of loss and data leaks have raised concerns about bank security.

Every bank must enforce security policies on client terminals, such as verifying operating system versions and ensuring antivirus software is installed. Only terminals that pass these checks are allowed to access the bank’s network.

China Construction Bank (CCB), one of the five major state‑owned commercial banks, operates over ten thousand branches nationwide. Because of its massive scale, security requirements differ across regions, making centralized policy configuration challenging.

To address this, Beijing Qianfang Technology Co., Ltd. proposed a solution that opens the controller’s network‑policy capability via Huawei eSDK. The head office creates policy templates, pushes them to the controller through an API, and then distributes them to regional branches.

Each branch applies the received templates to specific accounts, departments, or terminal IP ranges, enabling flexible, region‑specific security management while maintaining a unified planning framework.

This approach resolves the inability to centrally control policies, providing both centralized oversight and decentralized deployment to meet diverse security needs.