### Network security Your WebCTRL® building automation system's controllers and server should be as secure as possible. However, achieving this security can be challenging because of the complexities of networks, firewalls, and virtual private networks (VPN's). Two means for increasing the security of your system are: While the WebCTRL® server was designed to be secure, BACnet is an open protocol that can pose risks for the controllers. The most secure system is one that is completely isolated from the Internet, but that is not always possible. The v6-02 or later drivers for Automated Logic® controllers with Ethernet capability have a BACnet firewall feature that allows you to restrict communication with the controller to all private IP addresses and/or to a whitelist of IP addresses that you define. To set this up, go to the Network tree > the router > Driver > Bacnet Firewall. Follow the instructions in the interface. You should use TLS (HTTPS, not HTTP) to secure the client device that you are using to connect to the WebCTRL® server. See What is TLS (HTTPS)? for instructions on setting up TLS. For information on secure network configurations, options, and best practices, see the following documents on https://accounts.automatedlogic.com/download under Documents > WebCTRL Security. Security Best Practices for a WebCTRL® system WebCTRL® Security
In This Section What is TLS (HTTPS)?