In today’s world of broadband Internet and vast data storage, access to information is immediate and expected. The same applies to building automation, where multiple buildings and systems are increasingly integrated into comprehensive Building Management Systems (BMS) networks through Independent Data Layers (IDL). For system integrators, service technicians, and facility managers, secure, stable, and fast access to field devices has become essential. With the release of Niagara 4.15.1, the MAC36PRO controller introduces a new capability: the WireGuard VPN Client, designed to simplify and strengthen remote connectivity. 

What is a VPN?

A Virtual Private Network (VPN) is a technology that creates a secure and encrypted communication tunnel between two points over the internet. It ensures that sensitive data cannot be intercepted, while also allowing remote devices to appear as if they are part of the same local network.

What is WireGuard VPN?

WireGuard is a modern Open-Source VPN protocol recognized for its simplicity, speed, and strong security. Unlike older VPN solutions, WireGuard is built on state-of-the-art cryptography and a streamlined architecture, making it less complex while delivering significantly higher communication performance.

Fun fact: The entire WireGuard codebase consists of only around 4,000 lines of code, making it not only faster to audit but also easier to maintain compared to traditional VPN implementations. 

Why Remote Access to BMS Systems Matters 

The MAC36PRO combines the power of a quad-core processor with 36 onboard I/Os, dual independent Ethernet ports, up to two RS485 ports, and an optional M-Bus interface. Powered by the latest Niagara 4, it provides all the essential tools for an efficient and scalable BMS, which is ideal for both retrofits and new installations.

Key features include real-time HVAC control, security, programming, alarming, scheduling, trends, email notifications, and more. Being able to access BMS based on MAC36 controllers remotely provides clear operational benefits:

  • Faster troubleshooting without traveling to the site
  • Reduced service costs and downtime
  • Easier monitoring of system performance in real time
  • Secure configuration and updates from anywhere
  • Support for multi-site projects with centralized control

Setting up WireGuard VPN Client on MAC36PRO

With the new Niagara 4.15.1 update, enabling secure remote access on MAC36PRO is quick and simple. The new Device Management Webserver provides a user-friendly interface for configuring remote connectivity. All it takes is uploading a WireGuard .conf configuration file (generated on the server-side) into the controller via the web interface. No complex setup is required, which significantly speeds up configuration. The web server clearly displays the connection status and Online Mode. Once connected, users gain secure access to their Niagara Platform and Station, either through a web browser or directly via Niagara Workbench. 

Getting Started

To take advantage of the WireGuard VPN Client, users must first upgrade their MAC36PRO controller to the latest Niagara 4.15.1 version using iC Worbench or iC Niagara Expansion Pack. This release is a Long-Term Support (LTS) version, which means it will receive regular updates and security patches until Q4 2028.

Beyond secure remote access, Niagara 4.15.1 brings a wide range of new features and improvements:

  • WireGuard VPN Client for secure remote access
  • Local programming over USB
  • Device Management Webserver for easier commissioning
  • nE2 Link 1.7 with improved interoperability and simplified commissioning of RAC18-IP and VAV14-IP
  • Secure Fox connection over WebSocket
  • User login history for both Platform and Station
  • Web-based PX Editor for full station engineering in a browser
  • BACnet Revision 18 protocol update
  • New KitControl blocks aligned with ASHRAE 231p Control Description Language
  • iSMA-B-J9 WiFi Connectivity

More information about the latest 4.15 release can be found here: iC Niagara 4.15.1 LTS: iSMA CONTROLLI Official Release

The new WireGuard VPN Client on the MAC36PRO makes remote access secure and easy. With a simple setup, strong encryption, and the improvements in Niagara 4.15.1, building managers and integrators can safely monitor and control their BMS projects from anywhere.

Author: 
Pawel Szarmanski 
Senior Product Manager