WeConnect is one of the most powerful, simple, reliable and secure VPN services available on the market today. It enables remote access from any location with an Internet connection, revolutionizing the way you can access devices.

Remote access broadly refers to accessing a device that is not in the immediate vicinity, which can be at any location. This includes substations across the country, boreholes in a region, or even ships at sea. Remote Access makes accessing previously unreachable devices easier than ever.

The most crucial aspect of any Remote Access service is ensuring secure communications. This is where WeConnect provides an efficient and effective solution. It consists of secure networks, including numerous nodes (Westermo Devices) and clients (terminals). Depending on your configuration, nodes can communicate with each other or only with clients – allowing you to customize your network security. Additionally, nodes can be identical, enabling replicated networks.

Each node and client connects to the secure network through an SSL VPN. SSL VPNs are certificate based, with each secure network issuing a certificate to all nodes and clients. Only those nodes and clients can communicate within that secure network.

Within the WeConnect web portal, you manage access to nodes and clients and easily retract access with a single click. Essentially, this is “remote access without hassle”. There is no limit to the number of nodes, clients and secure networks you can have, enabling you to create extensive networks with ease.

Secure Management

The WeConnect web portal allows administrators to create, manage, monitor and troubleshoot nodes, clients and secure networks. It is crucial to keep this area secure to prevent unauthorized access to the central portal.

There are two options to securely protect your WeConnect portal. The first is to use multi-factor authentication (MFA), supported by tools such as Google Authenticator. This adds an extra layer of security by requiring an email and password along with a one-time verification code. While MFA is very efficient, it is not highly scalable.

The second, more secure option is to use Single Sign On (SSO). SSO is an authentication process enabling users to access multiple services with a single set of login credentials.

WeConnect can be integrated into your global SSO service, which is directly managed by your IT team. This not only removes the need for MFA, though provides oversight, manageability and ownership of access control to a central authority, trusted by yourselves.

Single Sign On is a very efficient and effective authentication process embedded in the core services you use daily. An IT department control access to who and what anyone can access by using groups, with many different services available. Now, WeConnect is part of that system.

Configuring WeConnect with SSO not only simplifies the process but also enables centralised control. You become the trusted authority for access to the secure remote access portal. This means that in the event of a breach from a bad actor, the response is much more efficient and effective to manage the incident quickly.

An additional level is that SSO is combined with other services such as access to external web services or emails, creating a unified system for multiple services. Additionally, SSO authorises connection to the node itself when the client connects. This multi-layered approach, with a simple unified solution provides a high level of security for remote access solutions.

Secure Remote Access

Naturally, all communication within a secure network, whether node-to-node or node-to-client, must remain secure.

It is vital that the WeConnect adheres to the same philosophy as any other important service. Configuring and deploying SSO compliments the powerful service that WeConnect offers. Taking a small step to protect access provides the foundation for secure remote access, always and anywhere.


This article is written by Global Training Manager Ant Lane and Product and Application Marketing Specialist Maja Axell.

Questions? Reach out to ant.lane@westermo.com