Secomea’s
SiteManager
Your OT gateway for remote access and data collection
Secomea’s SiteManager is a plug-and-play Industrial IoT gateway that connects your machines securely – and collects valuable operational data – all in one device. Available as hardware or software, it’s built for seamless deployment and easy integration across any OT environment.
What makes SiteManager different?
Turnkey gateway purpose-built for OT/ICS
Secomea's SiteManager seamlessly connects to any Operational Technology equipment and Industrial Control Systems. It is compatible with PLC, HMI, SCADA, USB (and even serial connection for legacy equipment) for full data tunneling support via Ethernet, Wi-Fi, 4G/LTE, UDP/TCP, Layer 2, Layer 3, web proxy.
map out your risk profile
Remote access and data collection
in one single tool
While typical IoT gateways function either as a VPN router or as a data collector, the SiteManager is a genuine Industrial IoT edge gateway capable of doing both at the same time. Establish seamless and secure remote VPN connectivity while concurrently gathering insights from your machines, which you can then send to your preferred cloud solution for further analysis.
Easily connect up to 100 OT devices simultaneously
You can quickly connect up to 100 Industrial IoT devices of all types and brands to a single SiteManager. The setup takes just a few minutes and is easy to perform by both IT and OT personnel with little to no training. Once the SiteManager is connected to your machines, you can set up access permissions on your Secomea M2M server (GateManager). Your technicians can then access the connected machines using Secomea’s Access Client (LinkManager) from their computer browser and operate on them remotely, as if they were plugging directly into the machines.
Access machines on-demand or setup a static, permanent tunnel connection 24/7
You can easily set up a persistent connection between two separate networks using our SiteManagers at both ends to continuously exchange information in one or both directions, such as SCADA systems, PLCs, and HMIs. No routing, firewall, or tunnel configuration is required. You can assign IP addresses dynamically and won’t encounter issues with conflicting IP subnets, a common problem with VPN-based solutions.
Available as hardware and software
The SiteManager IIoT edge gateway is available as a robust, industrial, graded DIN-mountable hardware device or as a software program that can be installed on Windows or Linux, HMIs, IPCs, or other computer platforms to run smoothly with the operating system and other applications in the background.
This deployment versatility allows the SiteManager to integrate seamlessly with your existing infrastructure and accommodate your own needs.
Our datasheets provide more information about each model, allowing you to choose the one that best suits your use case.
“The units are incredibly cost-effective.
If installing a SiteManager saves even just one trip, it’s paid for itself.
And while IT departments are usually paranoid about remote access, they are generally convinced by Secomea’s security credentials.”
– Ian Jacob, Engineering Director, Applied Automation
Key features of Secomea’s SiteManagers
Connect to multiple IIoT devices simultaneously
Rely on intelligent TLS-based VPN to connect to up to 100 devices of all types of industrial equipment via Ethernet, serial connection, or USB ports, using the equipment’s native protocols (e.g., Modbus, PROFINET, EtherCAT; Ethernet/IP, etc.)
Secure and easy Internet access
Ensure easy and firewall-friendly Internet access via LAN, WiFi, Ethernet, or 4G/LTE – either integrated or as a USB plugin option. All connections are outbound only, inside out, so no reconfiguration of firewalls is needed. Easy setup of network traffic direction (Pull and/or Push) and port/IP restrictions for maintaining high security.
Secure persistent network connections
Besides performing on-demand access, you can also use Secomea’s SiteManager to easily set up a static tunnel connection between two separate networks using our SiteManagers at both ends.
No routing, firewall, or tunnel configuration is required. Both Master and Client devices can be installed behind corporate firewalls and can have dynamically assigned IP addresses.
Simply configure the static link using our LogTunnel feature with an intuitive drag-and-drop setup in the Secomea M2M server (GateManager) and establish a persistent connection for the ongoing exchange of information in one or both directions, such as SCADA systems, PLCs, and HMIs.
Advanced safety for remote access management
You can also control the availability of given devices to be accessed remotely via Secomea by using the digital input function in the SiteManager, or monitor ongoing sessions using the digital output function.
The hardware version of the SiteManager features digital ports allowing operators to control remote access (e.g., via a physical switch linked to your operator panel, so that only when triggered will a session be established) and detect remote access sessions (e.g., via a light tower that turns on to clearly indicate when a session is in progress).
Similarly, the software version can be controlled via a comprehensive JSON Web API that can be used by the hosting platform to control access and monitor activity,
assuring that remote maintenance is done only within agreed service windows.
Seamlessly collect machine data
Collect data from your machines using the equipment’s native protocols (e.g., OPC UA, Modbus TCP, Siemens S7, Ethernet/IP, MQTT, etc.).
The data collection capabilities are extended with edge computing abilities through advanced aggregation functions and store-and-forward data buffering capacity. You can use the collected data to perform OEE calculations on one system and build manufacturing dashboards on another, all while feeding data into your ERP – simultaneously and transparently.
Send the raw data for further analysis and processing to your chosen cloud solution, such as Microsoft Azure IoT Hub, Amazon AWS IoT Core, Software AG Cumulocity IoT, Aveva Insight, etc.
Continuous store-and-forward database
Collected data is cached in the gateway to minimize data loss in case of unstable connection or power outage. The integrated Flash memory extends the RAM-based store-and-forward database, and the offline period can be further expanded by inserting an SD Flash card.
Exploring the Vulnerability Hub
Ensure your system
is up-to-date
With hundreds of SiteManagers in many different locations, keeping track of the up-to-dateness of each software and hardware may be challenging. To help you monitor them, we developed the Vulnerability Hub, your go-to place for checking the security status of your remote access system.
Vulnerability Score
Instant insights
This score reflects your system's security based on software and hardware up-to-dateness. It gets automatically updated based on the currency status of your SiteManagers.
Actionable tips
Next to the Vulnerability score, you'll find recommended steps to improve it, thus enhancing your security.
Firmware
Firmware updates
Easily spot which SiteManager are not running the latest firmware version so that you can quickly identify, locate, and update them.
Hardware
End of Life Notices
Stay ahead by easily detecting SiteManagers whose models are approaching End of Life or End of Support to ensure timely replacements.
Access your OT assets from anywhere
Security by design
At Secomea, everything we do follows internationally recognized industry best practices to offer you the safest remote access experience. Cybersecure your OT assets and networks with our purpose-built features.
Compliance, simplified
From physical safety to cybersecurity, from the NIS2 legislation to the Cyber Resilience Act (CRA) – we guide you as you navigate your regulatory environment, ensuring compliance without compromising efficiency.
Mitigate risks and gain control
Map out your risk profile and roll out your global risk management strategy to secure every phase, from prevention to recovery. Be supported in navigating legal developments and ensuring cyber-physical safety, service availability, and overall compliance.
OPENING A WORLD OF OPPORTUNITIES
Integrate Secomea with your existing tools
Through our robust API connections, Secomea fosters interoperability with the systems you already use, empowering you to harness the full potential of your technology stack.
Frequently asked questions
Installation and configuration
Is the Secomea SiteManager available as a software too?
Yes – it’s available as both a DIN-mounted hardware device and a software install for IPCs, HMIs, or PCs.
How do I configure a Secomea SiteManager?
You can choose your preferred method of configuration to easily and quickly install your SiteManager remotely or locally.
The most popular configuration method includes creating a USB configuration on your Secomea GateManager and inserting the USB stick into the SiteManager’s USB port.
The SiteManager will then automatically restart and connect to your GateManager to proceed with more advanced configuration and user access management.
Learn more here: https://kb.secomea.com/docs/getting-started-with-your-sitemanager/
How many devices can I connect to one SiteManager?
The number of devices you can connect to a single gateway varies depending on the model you choose to implement. With our hardware version, you only need one single gateway to connect up to 100 devices of all types and brands of industrial equipment via Ethernet, serial connection, or USB ports.
Does SiteManager support legacy equipment?
Absolutely – it supports USB and serial connections for older systems.
Operation and usability
What is Secomea's SiteManager used for?
The SiteManager is an industrial gateway that enables both secure remote access and data collection for OT systems.
Can I use Secomea's SiteManager for both remote access and data collection?
Yes – it supports simultaneous connections and machine data collection with edge processing.
As an admin, how do I manage user access to machines connected to a Secomea SiteManager?
You can do it from your Secomea GateManager, where you can enjoy intuitive drag-and-drop user management and advanced features, such as advanced grouping for bulk management of access rights and privileged access management with hierarchy-based user roles.
Moreover, Secomea integrates with the IAM solution you already use for secure authentication via SSO (Azure AD, Okta, etc.).
As a user, how do I access a machine connected to a Secomea SiteManager?
You can access machines remotely directly from your browser; there is no need to install any plugins or applications.
You simply need to use Secomea Prime or the LinkManager, where you can view all the machines you are authorized to access and be provided with access to machines (scheduled, on-demand, or upon your request).
It takes just a single click to establish a secure remote connection to a machine, allowing you to begin your remote service task immediately with your preferred protocol (RDP, VNC, SSH, or Telnet).
It will be no different than plugging into the machine directly, with no extra configuration on your computer.
Can I disable remote access to a machine connected to a SiteManager?
Yes, you can use a physical switch on the SiteManager hardware models to disable remote access sessions. Additionally, you can detect remote access sessions via a light tower. Similarly, the software version can be controlled via a local Web API.
How does Secomea protect against MitM attacks?
Each Secomea’s GateManager has a unique TLS certificate/key to which a Secomea’s SiteManager binds the first time they connect – a.k.a, “Trust-on-first-use” (ToFu) – and against which any subsequent connections are verified.
To change the server the gateway trusts, one must manually reconfigure the GateManager settings in the SiteManager.
An attacker cannot do this through interception alone.
By requiring manual reconfiguration for any changes, we prevents unauthorized redirections.
Technical specifications
Which protocols do Secomea's SiteManagers support for remote access?
Our SiteManagers support any industrial Ethernet UDP/TCP device at Layer3 and even Layer2.
You can connect all types of industrial equipment via Ethernet, serial connection, or USB ports using the equipment’s native protocols (e.g., Modbus, Profinet, Ethernet/IP, etc.).
It also supports most USB and serial RS-232 devices – if not directly, via appropriate USB adapters, such as MPI and RS-485.
Which protocols do Secomea's SiteManagers support for data collection?
Our SiteManager supports all the major industrial protocols for data collection, such as OPC UA, Modbus TCP, Siemens S7, Ethernet/IP, MQTT, etc.
To which cloud services can I send the data collected?
You can send the raw machine data collected for further analysis and processing to your chosen cloud solution, such as Microsoft Azure IoT Hub, Amazon AWS IoT Core, Software AG Cumulocity IoT, Aveva Insight, etc.
Is Secomea IEC 62443-certified?
Our systems periodically undergo third-party security audits and assessments. Through this significant investment, we ensure the most advanced protection for our customers and demonstrate compliance with international industry standards and best practices.
Secomea is certified under IEC 62443-4-1 standard, which specifies the process requirements for the secure development of products used in IACS.
This certification confirms that Secomea develops and maintains secure products following a secure development lifecycle (SDL), including a secure-by-design development methodology, secure implementation, patch management, and product end-of-life.
Moreover, the Secomea solution complies with IEC 62443-4-2 and IEC 62443-3-3 standards.
Get in touch
Get a personalized quote
Find out how Secomea’s solutions can fit your budget and maximize your ROI.
Team up with our Success team
We support every step of your journey beyond the initial implementation.