FactoryTalk Remote Access Security Architecture Guide

This document is a guide that provides a detailed description of the security architecture and network design for Rockwell Automation's FactoryTalk® Remote Access™ solution. It is intended for network administrators, security auditors, and decision-makers, offering insights into security management and design considerations to assess compliance with security standards. The document outlines the core functions of FactoryTalk Remote Access, emphasizing the importance of secure connections to remote devices over the Internet. It describes various components, including Access Servers, Relay Servers, and the Web Frontend, detailing their roles in facilitating secure connections. The document also covers transport security protocols, including TLS 1.2 and AES-256 encryption, ensuring data confidentiality and integrity during remote access sessions. Additionally, it discusses VPN implementation and file transfer operations, highlighting the security measures in place to protect user access and data integrity. Overall, the document serves as a comprehensive resource for understanding the security architecture of FactoryTalk Remote Access.