← All Building Knowledge topics
BACnet security
Before you rely on this
- This topic is regulated. The information above is general guidance, not compliance advice.
- Confirm obligations against the current primary regulation before relying on this entry.
Answer
Old BACnet is not secure by default; best practice includes VPN remote access, firewall segmentation, dedicated VLANs, role-based BMS access, and no uncontrolled public IP access. BACnet/SC (Secure Connect) provides encrypted communication.
Related Topics
Sources
- Source
- ASHRAE Guideline 32; industry security best practices
- Last reviewed
- 2024-04-01
Need advice for your building?
Talk to an Alpha Controls engineer about your BMS, HVAC controls, and managed instrumentation needs.