Network security is essential in today's interconnected world. As Building Management System (BMS) and smart building networks integrate with IT infrastructures, devices must handle more network traffic while ensuring the authentication, integrity, and confidentiality of data transmitted over the Internet. Protecting operational technology (OT) environments from cyber threats is critical. The migration to IP-based protocols in BMSs enables the use of established cybersecurity practices, such as encryption and device authentication through SSL/TLS.
Integrated Cybersecurity for OT Environments
Contemporary Controls delivers trusted industrial networking and building automation solutions with built-in cybersecurity features. Our products are engineered to support secure communication, remote access, and real-time network diagnostics, while delivering the reliability and resilience required in modern industrial and commercial applications.
Secure Web Access
Newer models of our BACnet routers and gateways support HTTPS, ensuring encrypted communication and data protection. The BASrouterSX and BASgatewaySX include resident HTTPS web servers for easy commissioning, status monitoring, and troubleshooting via any standard web browser.
Flexible Remote Access Options
Remote access can be achieved through several methods, with some are more secure than others. Fortunately, BACnet/IP supports a range of secure remote access methods, including:
- IP routing
- Port forwarding through firewalls
- BACnet/IP Broadcast Management Device (BBMD) setup
- VPN implementation
Our Skorpion VPN IP routers include BBMD functionality, allowing efficient IP network segmentation and optimized BACnet/IP traffic management within IT infrastructures.
VPN Solutions for Secure Connectivity
With models that support OpenVPN® client functionality, our Skorpion IP routers offer flexible and secure VPN options to safeguard systems and ensure continuous operation. Three VPN solutions are available:
- RemoteVPN subscription service - provides secure remote access without the need to maintain your own VPN server.
- Self-HostedVPN and BridgeVPN solutions - allow users to set up and maintain their own secure remote access without subscription fees or reliance on cloud-based servers.
OpenVPN is a well-supported open-source VPN technology that incorporates SSL/TLS security with encryption.
Looking Ahead: BACnet Secure Connect (BACnet/SC)
BACnet/SC introduces a secure communication layer based on IP and TLS protocols. While adoption will take time, many systems will continue to rely on legacy, non-BACnet/SC devices. Contemporary Controls remains committed to supporting secure and reliable access for both modern and legacy systems.