Concerned about recent PAN-OS and other firewall/VPN CVEs? Take advantage of Zscaler’s special offer today

Customer Success Story

OneMain Financial Eliminates Hardware, Resulting in Significant Cost Savings

with the Zscaler Zero Trust Exchange
Protect Data
Stop Cyberattacks
OneMain Financial


  • Company:OneMain Financial
  • Industry:Financial Services and Insurance
  • HQ:Evansville, Indiana, United States
  • Size:8,000+ employees in 1,400 branches across 44 states


The largest lending-exclusive financial company in the US, OneMain Financial is the leader in offering nonprime customers responsible access to credit. The company helps customers meet critical financial needs, including debt consolidation, home and auto repair, medical procedures, and other major expenses.


    Simplify infrastructure, reduce risk, perform unlimited TLS/SSL inspection, and deliver a smoother, faster user experience


      Ensures predictable costs, with no capacity limitations or hardware refreshes,Simplifies administration with fewer change windows and less to manage,Improves user experience with <1 ms latency for 96% of transactions,Fully inspects all traffic, including TLS/SSL-encrypted traffic


      • Ensures predictable costs, with no capacity limitations or hardware refreshes
      • Simplifies administration with fewer change windows and less to manage
      • Improves user experience with <1 ms latency for 96% of transactions
      • Fully inspects all traffic, including TLS/SSL-encrypted traffic

      Daniel Kelly

      VP/Managing Dir. of Network Services & Security, OneMain Financial
      Policy administration has been simplified immensely, where we make a change, we put it into one place versus entering it into ten different places.

      Customer Case Study

      This blog post was originally published in August 2020 and has been lightly updated.

      We spoke with Daniel Kelly, VP/Managing Director of Network Services and Security at OneMain Financial, one of the largest lending-exclusive financial companies in the United States. This financial leader has been in existence for more than 100 years and has lent more than $152 billion to customers across 44 states since 2005. The company switched from a stack of Broadcom (formerly Blue Coat) appliances to Zscaler Internet Access, and Mr. Kelly shared some of the results with us.



      Before we look specifically at OneMain Financial, let take a quick look at something that is top of mind of just about every executive—costs. Over just a three-year span, organizations can save millions with a cloud-based security-as-a-service platform over a hardware-based security stack.

      As if that wasn’t enough reason to switch, here are some of the specific benefits seen by OneMain Financial after it switched from Broadcom appliances to Zscaler:

      • Improved performance: OneMain reported zero employee complaints after the switch to Zscaler. It also discovered that 95% of its traffic in the Zscaler cloud has less than 1 millisecond of latency.
      • SSL inspection: As 96% of its traffic was encrypted, OneMain Financial was now able to inspect all of that traffic, which it used to be blind to.
      • Microsoft: With Zscaler, OneMain Financial was able to take advantage of the Microsoft best practice—moving away from the express routes and to Zscaler directly out to the internet.
      • Disaster recovery: The process of disaster recovery planning was made easier. OneMain Financial no longer needed to worry about matching up proxies in each data center with the proxies in the main data center.
      • Cost: The Zscaler platform provides OneMain with predictable costs as there are no capacity limitations and no hardware refreshes needed.
      • Staff: The IT team used to have to reboot their proxy servers at least once a month, sometimes three times a night, to keep the devices healthy and working properly. Now, IT team members can spend their time on strategic initiatives instead of on appliance maintenance.
      • Simplified administration: Policy administration is centralized. With Zscaler, changes only need to be made in one location instead of 10 different places, as was the case before. And since any changes would have to have been done manually at each location, there was always the chance of an error being introduced along the way.
      • Support: Zscaler provided OneMain Financial with a dedicated technical account manager to provide assistance, and OneMain Financial reported that the support with Zscaler has been stronger than with Broadcom. Even before the Broadcom acquisition, OneMain Financial often found it difficult to get support for the Blue Coat appliances it was using.
      Using Zscaler now gives us the capability to route things directly out through the internet in our branches and campus location.

      - Daniel Kelly, VP/Managing Dir. of Network Services & Security, OneMain Financial

      Lessons learned

      Of course, undertaking a task such as replacing your entire legacy appliance stack can seem daunting. But Mr. Kelly offered some tips and suggestions that anyone contemplating this type of move cloud use to their advantage:

      • Identify legacy proxy references early. OneMain had several servers that accessed the internet directly, and that number has evolved over time. But it wasn’t well-documented as to which servers those were. So Kelly and his team had to spend quite a bit of time tracking down all of that information. OneMain also monitored the traffic from its legacy appliances to see that the volume went down as it shifted to Zscaler. By the time OneMain’s appliances were decommissioned, that number was nearly zero.
      • Pilot users with special access privileges. Kelly and team focused on providing access to those employees that need special privileges, for example, members of the marketing team that require access to social media sites that are blocked for the rest of the company. After working through all of the special privileges, converting the rest of the users to Zscaler was easy.
      • Manage partners with allowlisted addresses. Many partners were explicitly allowing OneMain’s IP addresses. It is imperative that organizations reach out to customers to get a complete list of those addresses. (For OneMain Financial, the list of those partners and IP addresses was also not well documented, but they are now, according to Mr. Kelly.) After the shift to Zscaler, partners can either trust the Zscaler IP addresses or rely on ZIA Service Edges to anchor OneMain’s IP addresses.
      • Go mobile. Mr. Kelly and the IT team preferred to use Zscaler Client Connector (formerly Z App) for its mobile workforce. However, due to the large number of virtual desktops in use by OneMain Financial, the team developed a hybrid approach for its mobile users. Mr. Kelly recommends working with your end user computing teams to determine the best approach for your organization.
      We don’t have to worry about [adding proxies] in each data center anymore, so it’s a lot less for us to manage. Zscaler is doing that for us.

      - Daniel Kelly, VP/Managing Dir. of Network Services & Security, OneMain Financial

      Better in the cloud

      Like so many others, OneMain Financial has discovered the benefits of leaving appliances behind and moving to Zscaler.

      We’re not constantly chasing after measuring what’s going through the proxy servers … we can focus our team members on other initiatives.

      - Daniel Kelly, VP/Managing Dir. of Network Services & Security, OneMain Financial

      More from this customer

      Benefits of moving to the Zscaler Zero Trust Exchange
      Read the Blog
      Migrating from traditional hardware to cloud-first security
      Watch the Webinar