Remote Access; Local Access - AutomationDirect StrideLinx SE-SL30011 User Manual

Linx
Appendix E: StrideLinx Network Security
If the local (plant) IT department does not allow any form of internet connection to third
party hardware, the StrideLinx router with 4G LTE may be used to isolate the controls
network from the corporate IT network. LTE 4G access requires a standard SIM card
(standard size, 2FF) for cellular internet access.

Remote access

The StrideLinx router is equipped with a built-in firewall that completely separates the WAN
port (company network) from the LAN ports (controls network). The firewall blocks all
communication except for authorized and encrypted data verified by a valid certificate. This
means that only authorized users can access the controls network via our StrideLinx Cloud.

Local access

Default settings allow for zero communication from the company network to the controls
network (and vice versa). The StrideLinx router is configurable to allow communication from
the controls network to the company network, to the internet, or both. Authorization under
this scenario is by means of the firewall section of the Configuration in the StrideLinx Cloud.
There are three types of port forwarding supported in the StrideLinx router: LAN→WAN,
WAN→LAN, VPN→LAN.
• LAN→WAN options allow access from the LAN to the corporate network or the
internet. This option is needed if you are accessing a FTP or mail server on the corporate
network or cloud. This option maintains good security practice if the corporate router is
in place with strong security measures.
• WAN→LAN options allow access by port forwarding to incoming traffic.
• VPN→LAN port forwarding provides a secure port forward inside the encrypted VPN
tunnel so that StrideLinx users can access the HTTP server or VNC server of their
controls network devices by shortcut services in the StrideLinx Cloud. This feature allows
the clientless access mode for mobile & PC users as described in the "Solution Explained"
section above.
StrideLinx™ Cloud 2.0 Industrial VPN Routers User Manual
WARNING: This is usually not recommended as it opens specific ports to anyone on the internet
and could make the control network unsecure.
1st Edition Rev. C
E-6