TYPES OF INDUSTRIAL VPN ROUTERS FOR REMOTE ACCESS

SIMPLE DATA ACQUISITION DEVICES

Despite being categorized as gateways, these are seldom used for VPN connectivity, although the platform may offer IPSec- or SSL-VPN capability. In their simplest form they are based on MQTT subscriber/publisher principles for sending simple messages, such as status and event values.

For price sensitive use cases, a popular choice is the Raspberry Pi, and similar open single board computers.Such devices may not have a high degree of security, so are often used with equipment and data considered to be of low risk if compromised. The devices are typically based on Open Source platforms, such as Linux, which by itself could be an open door for hackers to exploit. Many such devices are also equipped with broadband connectivity, which may bypass the applied security measures of a site. Enabling VPN Routing on these devices should therefore be carefully considered.

Encrypted connection between engineers and devices

The Secomea SiteManager Software version is able to run on platforms where VPN connections are established inside out, and only standard Web ports are used. All encrypted connections are terminated at the central GateManager Access Management Server, establishing the link between engineers and devices dynamically through an encrypted connection.

STATIC VPN ROUTERS

Most devices in this category are intended as routers for VPN connections between two static end-points. These may be part of the industrial IT infrastructure, and may even be incorporated in the industrial firewall. Typically, the VPN Router may not necessarily have industrial grading, and may sit in a server room rather than a machine cabinet. Popular brands for industrial automation control system (IACS) networks are Cisco, Fortinet and Palo Alto.

Static connection limited to only a single port and IP address

If using low-cost single board computers, or dedicated IPC platforms from e.g. Advantech or Lanner, you may consider embedding the Secomea SiteManager Software into the platform with Secomea’s LogTunnel enabled. LogTunnel allows you to configure both unidirectional and bidirectional static connections which can be limited to only a single port and IP address. This will prevent undesired traffic between the end-points.