Remote access and monitoring for building management

Remote Engineer · Knowledge base

Buildings often contain several installations and maintenance contractors. The ventilation contractor should not automatically access unrelated systems. Start by mapping installations, administrators and permitted actions. Monitoring answers different questions from service access: is equipment running outside occupancy hours, is a temperature unusual and does a fault recur?

Siemens documents BACnet/IP, BACnet/SC and BACnet MS/TP networks for Desigo. The suitable route depends on the PXC and infrastructure installed. An IP route does not automatically provide access to a serial MS/TP bus. Check the available interface and any intermediate BACnet router or gateway.

Schneider explains how EcoStruxure BMS exposes data to external clients through BACnet and a Modbus TCP server interface. A configured server interface with agreed objects or registers can be a useful starting point for data logging. Existing integration inside a building does not automatically expose the same data to an external logger.

Position the ServiceGate at the agreed network boundary and give the contractor only the required location and services. A configured HTTP/HTTPS service in the portal may suit a web interface; assess VPN routing for vendor software. For BACnet, document object IDs and read permissions. For Modbus, record registers, scaling factors and units. Also check how BACnet device discovery is handled between subnets.

Example setup: compare an air-handling unit’s operating hours with temperatures and the building’s occupancy schedule. A deviation warrants investigation; measurements alone do not prove a cause or energy saving. Agree who receives alerts and who may change settings. Do not modify security or fire-alarm functions as part of an ordinary monitoring integration.

All ServiceGate routers support remote access and data logging/monitoring. The actual integration depends on model, firmware, interface and configuration. With VPN, your computer connects to the authorised location; configured VNC, RDP, HTTP or HTTPS services provide another access route through the portal. For logging, configure the protocol, data points and destination. The router receives that configuration and forwards data to the relevant service. Then configure dashboards, alarms and events. A named brand is a technical example, not a statement of certification, partnership or support for every model.

Assign routers to locations and grant users or groups only the permissions they need. The portal shows who connected to which location. This records connections, not automatically every action inside the machine. For audit purposes, also define retention periods and any additional log sources. Agree a firewall profile for each customer or location, such as deny by default with explicit exceptions. Segmentation does not replace controller and machine security updates.

• Brand, exact model, firmware and installed software licences.
• Network diagram, IP addresses, interfaces and the owner’s approval.
• Required service tasks and the people who may access the installation.
• Measurements with register or object lists, units and collection intervals.
• Requirements for alarms, retention and any on-site logging during connection loss.

Remote Engineer has worked on remote access and controller solutions since 2008. Share your documentation and application with our team. We assess what is standard and where configuration or custom development is needed. Contact us for pricing and a suitable proposal.

• Fundamentals: industrial remote access and data logging
• View the solution for this sector
• Remote Portal
• Data monitoring
• Remote Access Services

Manufacturer documentation consulted on 22 September 2026. The examples describe possible architectures, not completed integration tests or customer results. Always check the exact model’s documentation before implementation. Trademarks belong to their respective owners.

• Siemens — Desigo BACnet networks
• Schneider Electric — EcoStruxure BMS data interfaces

• Building management: remote access and monitoring
• Access Siemens Desigo remotely
• Connect EcoStruxure Building Operation for service and data
• Remote access to WAGO building controllers, BACnet and KNX
• Monitor HVAC systems: turn faults into useful trends