TroutTrout

Service your machines at every customer plant. The plant sees every session.

Remote maintenance for machine builders and OEMs

Keep your VPN or 4G link. Each OEM gets a recorded session limited to its own machines, plus read-only access for monitoring.

Last updated:

For the machine builder and the plant

How machine builders reach their machines through one gate.

What changes when each vendor's VPN or 4G link ends at the plant's own gate, not on the production network.

Each OEM sees only its machines.

Several machine builders can work at once, each with its own policy per machine and time window. A drive vendor cannot see the packaging line next to its machine.

Monitoring without control.

Reading values and writing them are separate permissions. An OEM can follow its machine's data without changing anything. Write access can be limited to a service window.

Keep the gateway in the machine.

If the machine ships with its own remote-access router, it can stay. Access Gate sits behind it, so the session still gets identity checks, protocol policy and recording.

A session per service call.

Access opens for the maintenance window and closes on its own. Each service call needs a new login, so no standing account remains. OEM engineers can use a directory separate from your staff's.

One recording for the plant and the OEM.

Every session is recorded: screen, commands and files transferred. If a machine behaves differently after a service call, both sides review the same recording.

The gate is the first service you run, not the last.

Secure your plants today. Control your digitalization tomorrow.

Access Gate puts compute on the wire, next to your assets. Once the gate is in, the same box hosts the services that pull OT in securely: remote access, protocol gateways, DNS and time, historian, update server. Accelerate your digitalization, in control.

Manufacturers across the supply chain use Access Gate.

Elna Magnetics
100%

on-site CUI data flows, from engineering designs to production plans, aligned with CMMC Level 2 compliance.

Read the case study

Trusted by leading companies

Thales
Orange Cyberdefense
Carahsoft
Millbrook Machine
Elna Magnetics
NeverHack
“The Trout Access Gate gave us a clear path to CMMC compliance without disrupting our manufacturing operations.”

Director of IT

Defense Contractor · Elna Magnetics

Datasheet

Download the Access Gate datasheet.

The full product overview: on-premise remote access, MFA, session recording and CMMC alignment.

Done

What's inside

Remote access architecture, on-premise bastion host, MFA enforcement, session recording, CMMC Level 2 compliance alignment.

2 pages

See it in action.

Request a live demo. See how a vendor session reaches only the authorized machines and is fully logged.

Request a Demo
FAQ

Common questions about OEM remote maintenance.

0

VPN tunnels that end on your production network. The vendor's VPN or 4G link ends at the Access Gate, which gives time-limited access per session.

The OEM's VPN or 4G link ends at the plant's gate. The OEM's engineer opens a browser and authenticates with MFA against an identity the plant controls, such as a vendor directory separate from the staff directory. The gate then connects the engineer to the machines the plant has authorized, over the protocols the job needs. Nothing is installed on the machine, and the engineer never receives an address on the plant network.

Yes. The gate is protocol-aware, so read and write are separate permissions. An OEM can be allowed to read values from its machine for remote monitoring and diagnostics, while commands that change the machine are blocked outside an authorized service window.

Every vendor session is recorded, including screen activity, commands and files transferred. Recordings are stored on-premise under your control. You can open them immediately for an incident investigation and provide them for compliance audits and CMMC assessments.

Sessions close automatically at a configured time limit or when the vendor disconnects. No access remains open. Each new maintenance event requires a new authentication and authorization.

Yes. The Access Gate supports concurrent vendor sessions with separate policies per vendor, machine and time window. Each vendor sees only their authorized equipment and cannot see other vendors' equipment.