What protocols does SiteConduit support for building automation remote access?

SiteConduit supports BACnet/IP (UDP 47808), Modbus/TCP (TCP 502), Niagara Fox (TCP 4911, 5011), HTTP/HTTPS (TCP 80, 443), and ICMP. The protocol allowlist is configurable per site, and a default-deny bridge filter blocks everything not explicitly permitted.

How does SiteConduit prevent unauthorized lateral movement on building networks?

Every session runs behind a protocol-level firewall with a default-deny bridge filter. Only approved BAS protocols are permitted. Technicians can reach their BACnet controllers and Niagara stations but cannot access file servers, printers, or IT infrastructure. Sessions are also bandwidth-limited to prevent data exfiltration.

Does SiteConduit support compliance and audit requirements?

SiteConduit generates detailed compliance reports with full session history including technician identity, session times, protocols used, and data transferred. Reports export to CSV and are designed to support industry compliance frameworks, insurance renewals, and vendor risk assessments.

How long does it take to deploy SiteConduit at a building site?

Minutes, not months. SiteConduit ships a pre-configured CPE device to your site. Your facilities team plugs it into the building automation network. The device auto-provisions via Zero Touch Provisioning with no on-site IT support required.

Can building owners terminate remote access sessions immediately?

Yes. SiteConduit provides a one-click kill switch that terminates any session in seconds. The encrypted tunnel is disabled, credentials are revoked, and the network bridge is destroyed. Bulk termination is available per-site or across all sites in your organization.

BACnet — Building Automation Knowledge Base

10 articles in BACnet

BStep-by-step guide

BACnet/SC Certificate Authority Setup

Deploying a CA for BACnet Secure Connect requires PKI knowledge most BAS teams lack.

10 min read

BReference guide

BACnet MS/TP Wiring Best Practices

Improper wiring (T-taps, missing termination, wrong cable) causes intermittent failures that are hard to diagnose.

8 min read

BScript tutorial

BACnet Trending: Configure and Export Trend Logs

Extracting historical data from BACnet Trend Log objects for analysis or compliance reporting.

9 min read

BReference guide

BACnet Network Number Planning Guide

Conflicting network numbers after adding routers cause routing loops and device unreachability.

8 min read

BTroubleshooting guide

BACnet Duplicate Device ID: Find and Fix It

Two devices sharing a device instance number cause data collisions, lost messages, and control failures.

7 min read

BStep-by-step guide

BACnet/IP to MS/TP Router Configuration

Bridging BACnet/IP supervisors to MS/TP field trunks requires correct IP settings, MAC addresses, baud rate, and network number assignment.

9 min read

BTroubleshooting guide

How to Fix BACnet MS/TP Address Conflicts

Duplicate MAC addresses on an MS/TP trunk cause intermittent communication failures and CRC errors.

8 min read

BStep-by-step guide

BACnet BBMD Setup: Multi-Subnet Discovery

WHO-IS broadcasts stop at subnet boundaries; devices on other VLANs are invisible without BBMD.

10 min read

BTroubleshooting flowchart

BACnet Device Discovery Not Working: Fix It

WHO-IS requests go unanswered; causes range from firewall rules to duplicate device IDs to subnet mismatches.

9 min read

BStep-by-step guide

BACnet Secure Connect (BACnet/SC) Setup Guide

BACnet/SC requires TLS certificates, hub configuration, and WebSocket setup that most technicians have never done.

11 min read