Netbase Solution Services · Factories and OT sites
Factory remote access without an open inbound port
The AdminKit factory remote-access redesign is a Netbase engagement that replaces port-forwarded VNC, RDP or Modbus access to PLCs, HMIs and OPC UA devices with outbound-only connections from the site. No inbound port stays open on the factory firewall, and maintenance sessions are recorded and limited to agreed windows.
- Delivered by
- Netbase JSC
- Engagement
- Per site, with ongoing operation
- Pricing
- Custom quote
Updated · AdminKit team, Netbase JSC
Who is this service for?
- Factories and OT sites
- System integrators managing client sites
- Plant operators with vendor maintenance access
What does Netbase deliver?
Every engagement starts from a written scope. This is what it covers, what it does not, and what can be added.
Supported
- Modbus TCP, OPC UA, BACnet/IP and RDP/VNC access to PLCs and HMIs
- Outbound-only site agent, no inbound firewall port
- Recorded maintenance sessions
- Access limited to agreed maintenance windows
Not included
- Reprogramming PLC logic or HMI screens
- Replacing industrial hardware
- Testing equipment you have not verified you own
Extra services
- A secure MQTT broker for the same sites
- Exposure review for other OT protocols on your verified assets
- Rolling the design out to more sites
How does an engagement run?
Exposure review
Open port-forwards found, starting with modbus-check on verified assets.
Design and quote
Who needs access to what, per site.
Install and switch over
Site agent installed, inbound firewall rules closed.
Operate
Recorded sessions, maintenance windows, changes as your sites change.
What do you get at the end?
- A map of every port-forward and remote path into your OT equipment
- An access design: who reaches which PLC or HMI, and when
- Outbound-only site agent installed and old inbound rules removed
- Recorded maintenance sessions within agreed time windows
Who delivers this service?
Netbase Enterprise Solutions and Applications Joint Stock Company (Netbase JSC)
- Netbase JSC was founded in 2012.
- Netbase JSC has served 500+ clients.
- Netbase has worked with clients in 80 countries.
- Every service is delivered remotely, so clients in any country and any industry can engage.
- Contracts and invoices are issued by Netbase JSC; payment goes to the company by bank transfer to Netbase JSC's company account or PayPal Business.
Which AdminKit products and tools does this build on?
Netbase engineers use the same AdminKit checks you can run yourself for free, so you can see the starting point and re-check the result after handover.
What are you responsible for?
Every engagement runs on a written scope of work with a responsibility matrix: what Netbase JSC commits to and what stays with you. Changes to scope are agreed and re-quoted before work continues. Contracts and invoices are issued by Netbase JSC. Automated AdminKit checks used along the way are advisory, as described in the disclaimer.
Talk to an expert
Huy Nguyen (David), Founder & CEO, Netbase JSC
Ask about Factory remote-access redesign: scope, timing or a quote.
Frequently asked questions
Why is port-forwarding to a PLC or HMI a problem?
Port-forwarding opens an inbound path from the internet straight to the device. Industrial protocols like Modbus TCP were generally not designed with authentication in mind, so anything that can reach the open port can often interact with the device directly.
How does an outbound-only connection work?
A small agent at the factory site connects outward to a relay that technicians reach after signing in. Because the connection starts from inside the site, no inbound port has to be opened on the site firewall.
Do our vendors have to change how they work?
They sign in instead of connecting to a forwarded port, and their sessions are recorded. The design step agrees with you which vendor reaches which device, and when.
How much does a remote-access redesign cost?
Every engagement is scoped and quoted per site after the exposure review. There is no fixed public price.
Talk to our team about this service
Tell us what you run and what you need. We scope it with you first, then send a quote.