What protocols does SiteConduit support for building automation remote access?

SiteConduit supports BACnet/IP (UDP 47808), Modbus/TCP (TCP 502), Niagara Fox (TCP 4911, 5011), HTTP/HTTPS (TCP 80, 443), and ICMP. The protocol allowlist is configurable per site, and a default-deny bridge filter blocks everything not explicitly permitted.

How does SiteConduit prevent unauthorized lateral movement on building networks?

Every session runs behind a protocol-level firewall with a default-deny bridge filter. Only approved BAS protocols are permitted. Technicians can reach their BACnet controllers and Niagara stations but cannot access file servers, printers, or IT infrastructure. Sessions are also bandwidth-limited to prevent data exfiltration.

Does SiteConduit support compliance and audit requirements?

SiteConduit generates detailed compliance reports with full session history including technician identity, session times, protocols used, and data transferred. Reports export to CSV and are designed to support industry compliance frameworks, insurance renewals, and vendor risk assessments.

How long does it take to deploy SiteConduit at a building site?

Minutes, not months. SiteConduit ships a pre-configured CPE device to your site. Your facilities team plugs it into the building automation network. The device auto-provisions via Zero Touch Provisioning with no on-site IT support required.

Can building owners terminate remote access sessions immediately?

Yes. SiteConduit provides a one-click kill switch that terminates any session in seconds. The encrypted tunnel is disabled, credentials are revoked, and the network bridge is destroyed. Bulk termination is available per-site or across all sites in your organization.

Home/Knowledge Base/Modbus

Modbus

Modbus RTU, Modbus TCP, gateways, register mapping, RS-485 wiring

5 articles in Modbus

MReference table

Modbus Function Codes: Complete Reference Cheat Sheet

Technicians know they need 'function code 3' for holding registers but lose time hunting down the rest — the read/write split, the exception code map, and which functions a given gateway actually implements.

8 min read

MStep-by-step guide

Modbus TCP Gateway for RS-485 Devices: Configuration Guide

Legacy Modbus RTU devices on an RS-485 trunk need to be reachable by an IP-based supervisor; the gateway sits between the two and most first-day failures come from serial-side wiring or parameter mismatches, not the gateway itself.

9 min read

MBuyer guide + setup

Modbus RTU to TCP Gateway Setup Guide

Legacy Modbus RTU devices need to connect to IP-based supervisors; gateway selection and configuration is confusing.

9 min read

MReference guide

Modbus Register Map Reading Guide for BAS

Technicians struggle to interpret Modbus register maps for VFDs, energy meters, and chillers; 0-based vs 1-based addressing causes off-by-one errors.

8 min read

MTroubleshooting checklist

Modbus RTU Troubleshooting Checklist for BAS

Communication fails due to mismatched baud rates, wrong parity, reversed RS-485 polarity, or register addressing confusion.

8 min read