What protocols does SiteConduit support for building automation remote access?

SiteConduit supports BACnet/IP (UDP 47808), Modbus/TCP (TCP 502), Niagara Fox (TCP 4911, 5011), HTTP/HTTPS (TCP 80, 443), and ICMP. The protocol allowlist is configurable per site, and a default-deny bridge filter blocks everything not explicitly permitted.

How does SiteConduit prevent unauthorized lateral movement on building networks?

Every session runs behind a protocol-level firewall with a default-deny bridge filter. Only approved BAS protocols are permitted. Technicians can reach their BACnet controllers and Niagara stations but cannot access file servers, printers, or IT infrastructure. Sessions are also bandwidth-limited to prevent data exfiltration.

Does SiteConduit support compliance and audit requirements?

SiteConduit generates detailed compliance reports with full session history including technician identity, session times, protocols used, and data transferred. Reports export to CSV and are designed to support industry compliance frameworks, insurance renewals, and vendor risk assessments.

How long does it take to deploy SiteConduit at a building site?

Minutes, not months. SiteConduit ships a pre-configured CPE device to your site. Your facilities team plugs it into the building automation network. The device auto-provisions via Zero Touch Provisioning with no on-site IT support required.

Can building owners terminate remote access sessions immediately?

Yes. SiteConduit provides a one-click kill switch that terminates any session in seconds. The encrypted tunnel is disabled, credentials are revoked, and the network bridge is destroyed. Bulk termination is available per-site or across all sites in your organization.

Home/Knowledge Base/General BAS

General BAS

Cross-platform tips, career advice, commissioning checklists, vendor-neutral guides

4 articles in General BAS

GReference guide

What a Conduit Is on a Building Automation Site

A search for 'conduit' on a building site returns electrical-conduit results, but in OT security a conduit is the controlled communication path between zones — and most single sites have never documented theirs.

8 min read

GReference guide

IT/OT Separation Services: What They Cover and How to Evaluate Them

Building owners are told they need 'IT/OT separation,' but the market term covers everything from a one-time VLAN configuration to a multi-year zone-and-conduit redesign; evaluating providers requires understanding what the work actually involves.

9 min read

GReference guide

Conduit Security for Building Automation Networks

Auditors and insurers ask how traffic between BAS security zones is controlled, but most buildings have undocumented, wide-open conduits where inter-VLAN routing is left unrestricted.

9 min read

GReference guide

Secure Remote Access for Cyber-Physical Systems (CPS)

Vendors and integrators need remote access to physical control systems, but persistent VPNs, port forwarding, and shared credentials create the third-party exposure that drives most OT security incidents.

9 min read