Secure remote access for industrial machines

Industrial remote access refers to the ability to remotely connect to and control industrial machines, such as PLCs (Programmable Logic Controllers) and HMIs (Human-Machine Interfaces), over the internet. This is typically achieved using secure VPN connections, allowing technicians to perform tasks such as monitoring, troubleshooting, and configuring equipment from anywhere, at any time.

A remote connection is a link established over the internet that allows a user to access and control a device or system from a different physical location. In an industrial context, this often involves connecting to machines or control systems to perform maintenance, updates, or diagnostics remotely.​

Read more

Remote access works by using devices like the IXrouter, which creates a secure connection between the industrial machine and the cloud platform. The connection is typically established via a VPN, ensuring data is encrypted and secure. Once connected, users can access the machine’s control panels and view diagnostic information​.

Here’s how it works with IXON Cloud:

1. Connection setup 
   A device like the IXrouter is installed on the machine site. This device connects to the internet via Ethernet, Wi-Fi, or 4G.
2. Secure VPN tunnel 
   The IXrouter establishes a secure VPN tunnel to the IXON Cloud, ensuring all data transmitted is encrypted and secure.
3. Access and control
   Authorized users can then remotely access the machine via the IXON Cloud using various services such as VNC (for remote desktop access), HTTP (for web interface access), and WebSocket. This setup allows users to monitor, troubleshoot and update machines from any location​.

The benefits of remote access for machine builders include:

• Reduced downtime: Quickly address issues without waiting for on-site visits.
• Cost savings: Lower travel and labor costs by reducing the need for physical presence.
• Increased efficiency: Perform updates and maintenance tasks more efficiently.
• Enhanced support: Provide better support to customers and operators by accessing machines remotely.
• Scalability: Easily manage multiple machines and locations from a central point​​.

Remote access is widely used for:

• Remote troubleshooting and maintenance of machinery.
• Remote programming and configuration of PLCs.
• Monitoring and data logging from industrial devices.
• Providing support and training to on-site staff.
• Commissioning new equipment and systems remotely​.

• Remote troubleshooting: Diagnosing and fixing issues without the need for on-site visits.
• Preventive maintenance: Monitoring equipment to predict and prevent failures.
• Remote monitoring: Continuously observing machine performance and conditions.
• Configuration and updates: Remotely updating software or configurations on industrial devices.
• Support and training: Providing real-time support and training to on-site operators.

Read here how IXON customers use remote access.

While no system can be guaranteed to be 100% secure, IXON implements multiple security measures to ensure high levels of protection. This includes using VPNs for encrypted connections, built-in firewalls in their edge gateways to separate networks, role-based access control (RBAC), and compliance with international security standards such as ISO 27001, ISO 27017, ISO 27701 and IEC 62443​.

The security of remote access is guaranteed through multiple layers of protection:

• Encrypted VPN tunnels: All data transmissions between the machine and the cloud are encrypted using secure VPN tunnels, preventing unauthorized access.
• Built-in firewalls: IXON’s edge gateways have a built-in firewall that separates the machine network from the factory's internal network, adding an extra layer of protection.
• Role-based access control (RBAC): Access to machines and data is managed through RBAC, ensuring that only authorized users can access specific functions and data.
• Two-factor authentication (2FA): Additional security is provided by requiring 2FA for user access, significantly reducing the risk of unauthorized access.
• Compliance with security standards: IXON adheres to international security standards such as ISO 27001, ISO 27017, ISO 27701 and IEC 62443, ensuring a high level of security and regular audits to maintain compliance​.

Yes, industrial remote access can be integrated into existing systems. IXON provides open APIs that allow for seamless integration with various IT and OT systems. This integration enables:

• Data exchange: Secure data exchange between machines and enterprise systems like ERP, CRM, and other business applications.
• Automation: Automated configuration workflows for deploying new equipment and pushing updates directly from existing systems.
• Custom solutions: Development of custom applications and services tailored to specific business needs, enhancing the overall IIoT infrastructure.
• Scalability and flexibility: The open and documented APIs ensure that the solution is future-proof and can adapt to evolving business requirements without vendor lock-in​.

Read more about integrations here or take a look at our Marketplace.