What protocols does SiteConduit support for building automation remote access?

SiteConduit supports BACnet/IP (UDP 47808), Modbus/TCP (TCP 502), Niagara Fox (TCP 4911, 5011), HTTP/HTTPS (TCP 80, 443), and ICMP. The protocol allowlist is configurable per site, and a default-deny bridge filter blocks everything not explicitly permitted.

How does SiteConduit prevent unauthorized lateral movement on building networks?

Every session runs behind a protocol-level firewall with a default-deny bridge filter. Only approved BAS protocols are permitted. Technicians can reach their BACnet controllers and Niagara stations but cannot access file servers, printers, or IT infrastructure. Sessions are also bandwidth-limited to prevent data exfiltration.

Does SiteConduit support compliance and audit requirements?

SiteConduit generates detailed compliance reports with full session history including technician identity, session times, protocols used, and data transferred. Reports export to CSV and are designed to support industry compliance frameworks, insurance renewals, and vendor risk assessments.

How long does it take to deploy SiteConduit at a building site?

Minutes, not months. SiteConduit ships a pre-configured CPE device to your site. Your facilities team plugs it into the building automation network. The device auto-provisions via Zero Touch Provisioning with no on-site IT support required.

Can building owners terminate remote access sessions immediately?

Yes. SiteConduit provides a one-click kill switch that terminates any session in seconds. The encrypted tunnel is disabled, credentials are revoked, and the network bridge is destroyed. Bulk termination is available per-site or across all sites in your organization.

Home/Knowledge Base/Network & Security

Network & Security

VLANs, firewalls, Wireshark captures, protocol ports, IEC 62443, OT segmentation

6 articles in Network & Security

NetTool roundup

Building Automation Network Diagnostic Toolkit

Essential free tools every BAS technician should have on their laptop.

7 min read

NetChecklist

How to Run a BAS Cybersecurity Audit

Building owners face pressure from insurers and regulations but have no BAS-specific audit checklist.

10 min read

NetDesign guide

IEC 62443 Security Zones for Building Automation

IEC 62443 guidance is abstract and manufacturing-focused; BAS professionals need a practical translation.

10 min read

NetDesign guide

VLAN Design for Building Automation Networks

IT teams lack guidance on structuring VLANs specifically for BAS protocols and broadcast traffic.

10 min read

NetConfig snippet

BACnet Firewall Rules: Ports to Open and Block

After network segmentation, BACnet traffic gets blocked by firewalls; technicians need exact port/protocol rules.

7 min read

NetConfig snippet / cheat sheet

Wireshark Display Filters for BACnet

Technicians capture traffic but cannot isolate BACnet packets from general network noise.

6 min read