Secure remote access architecture (IEC 62443) and remote support in canning lines
To provide real-time remote engineering support without exposing the cannery’s OT network to lateral movement, each machine or line must connect through an isolated industrial gateway (IEC 62443-3-2 zones and conduits model) with multi-factor authentication (MFA), end-to-end encryption and plant-controlled activation—never via a flat VPN with unrestricted subnet routing.
1. Why traditional flat corporate VPNs compromise plant availability
Connecting cookers, seamers, checkweighers and palletizing cells on a single flat Level 1/2 network exposes the entire factory when a broad VPN tunnel is opened. IEC 62443 replaces flat networks with Zones and Conduits, isolating each machine cell.
2. Deploying industrial gateways under IEC 62443-4-1 / 4-2
TACORE control cabinets equipped with remote support use dedicated industrial gateways (such as Secomea SiteManager) audited under IEC 62443-4-2, enforcing WAN/LAN port isolation, device-level micro-tunnels and plant-initiated access control.
3. NIS2 Directive (EU) 2022/2555 implications for the food sector
Directive (EU) 2022/2555 (NIS2) explicitly lists food production and processing in Annex II, requiring supply-chain cybersecurity risk management across industrial equipment suppliers.
Related TACORE machinery and processing lines
Engineering frequently asked questions
Can the cannery control when TACORE remote support connects to the machine?
Yes. A physical key switch on the cabinet or an HMI toggle allows plant maintenance to enable remote access strictly during authorized maintenance windows.
Regulatory bibliography & primary sources
- IEC 62443-3-2 / 4-2 — Industrial communication networks — Network and system security (Zones, conduits & IACS component requirements) International Electrotechnical Commission (IEC)Fuente oficial
- Directive (EU) 2022/2555 (NIS2) — Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union (NIS2) EUR-Lex · European UnionFuente oficial
More technical articles in Insights
← Back to Insights indexWant to review this specification with our Engineering Dept.?
We evaluate the technical, throughput and regulatory requirements of your canning or freezing line.
