What protocols does SiteConduit support for building automation remote access?

SiteConduit supports BACnet/IP (UDP 47808), Modbus/TCP (TCP 502), Niagara Fox (TCP 4911, 5011), HTTP/HTTPS (TCP 80, 443), and ICMP. The protocol allowlist is configurable per site, and a default-deny bridge filter blocks everything not explicitly permitted.

How does SiteConduit prevent unauthorized lateral movement on building networks?

Every session runs behind a protocol-level firewall with a default-deny bridge filter. Only approved BAS protocols are permitted. Technicians can reach their BACnet controllers and Niagara stations but cannot access file servers, printers, or IT infrastructure. Sessions are also bandwidth-limited to prevent data exfiltration.

Does SiteConduit support compliance and audit requirements?

SiteConduit generates detailed compliance reports with full session history including technician identity, session times, protocols used, and data transferred. Reports export to CSV and are designed to support industry compliance frameworks, insurance renewals, and vendor risk assessments.

How long does it take to deploy SiteConduit at a building site?

Minutes, not months. SiteConduit ships a pre-configured CPE device to your site. Your facilities team plugs it into the building automation network. The device auto-provisions via Zero Touch Provisioning with no on-site IT support required.

Can building owners terminate remote access sessions immediately?

Yes. SiteConduit provides a one-click kill switch that terminates any session in seconds. The encrypted tunnel is disabled, credentials are revoked, and the network bridge is destroyed. Bulk termination is available per-site or across all sites in your organization.

Home/Knowledge Base/Facility Explorer

Facility Explorer

Johnson Controls FX60/FX80, FX Supervisory, N2 protocol, Metasys integration

3 articles in Facility Explorer

FXReference table

EcoStruxure BACnet Error Codes Reference

Decoding cryptic BACnet error codes in EcoStruxure Building Operation log files.

6 min read

FXStep-by-step guide

Facility Explorer FX60 Network Configuration

FX60 DIN-rail controllers need correct LAN1/LAN2, HTTPS port 5011, and BACnet driver setup.

7 min read

FXStep-by-step guide

Facility Explorer FX80 Initial Setup Checklist

FX80 arrives factory-commissioned but default credentials and network settings must be changed before deployment.

7 min read