Overview; Purpose; Background; Trane Firewall Router Solution - Digi WR21 Installation, Operation And Maintenance Manual

Overview

Purpose

The purpose of this document is to help you prepare, select, order, implement, and support a
standard firewall solution for secure remote access. This document describes how to determine
the appropriate Trane Standard Firewall installation type, as well as installation instructions for
each kit to achieve secure remote access for both Trane and customers.

Background

Trane requires secure remote access to a customer's Tracer BAS for troubleshooting and
diagnostics, and to update the Tracer BAS when needed. The preferred method for remote
access is to use Trane Connect Remote Access. Trane recommends using Trane Connect Remote
Access to securely connect to the Tracer BAS. Trane Connect Remote Access is built into many
Tracer BAS controllers, including Tracer SC/SC+ and Tracer Concierge, allowing Trane
technicians and customers to securely access their Tracer BAS while away from the office. Refer
to the Trane Connect Remote Access How-To Guide, BAS-SVU22 for more details.
Trane's recommended best practice is to install Tracer BAS controllers behind the customer's
firewall on the network (LAN/WAN), ideally with the assistance of the customer's IT staff. In some
scenarios, a firewall already exists but is misconfigured; in other cases there is no firewall. A Digi
Transport WR21 firewall, installed into the BAS network. provides an additional layer of security
when other scenarios exist outside of the recommended best practices.

Trane Firewall Router Solution

Trane has created a standard solution, process, and support system for Trane offices to use when
a Tracer BAS controller is directly exposed to the public Internet.
The Firewall Router solution is available in two pre-packaged kits:
•
•
Both kits contain all necessary components:
•
•
•
•
•
Additional support includes:
•
•
•
•
The Firewall router solution is delivered pre-configured. It ships directly to your office at pre-
negotiated pricing from an online store that maintains firewall router supplies for Trane.
Place a Digi Transport WR21 Firewall in Front of the Tracer BAS
Controller
S S c c e e n n a a r r i i o o : :
Your customer's Tracer BAS has one or more IP ports (for example, HTTP, HTTPS, BACnet, SSH)
that are "exposed" to the Internet and there is no IT staff to add or configure a firewall to block
them.
S S o o l l u u t t i i o o n n : :
6
Kit #1 – An internal assembly designed for installation inside a medium or large Tracer BAS.
Kit #2 – An external assembly designed for remote mounting.
Digi firewall router
Mounting hardware, power supply or power connector
Pre-configured firewall for easy installation and startup
First year maintenance plan
Trane Product support
Online store (www.industrialnetworking.com/Trane)
CSET blocks and estimator assemblies
First year replacement program (RMA)
Virtual Private Network (VPN) accounts for customer remote access
BAS-SVX069F-EN