Remote access

Reaching an installation remotely usually means heavy network configuration: a fixed IP address, open ports, firewall rules — slow steps that IT departments often refuse.

The WBox does it differently. It sets up a secure link to the Weble Cloud on its own, like any internet-connected device. You then reach your installation through the cloud, with nothing to open or reconfigure on the site network.

• Peer-to-peer mesh network. The connection favours a direct path between you and the installation; no third-party cloud is forced into the data path. Every device holds its own keys and authenticates its peers directly.
• Layer 2 or Layer 3, your choice. Bridged mode (a virtual Ethernet switch, shared broadcast domain) for the protocols that need it — BACnet/IP, KNX IP, multicast discovery — or routed mode for minimal overhead.
• Multi-path connection with automatic failover. At start-up every available path is tried in parallel and the fastest is kept. On restrictive networks, fallback tunnels take over — the link gets through anywhere.
• One-time licence, no subscription. Remote access is activated once per gateway, with no recurring fees and no billing by data volume. The cost stays predictable, even across a large fleet.
• Simultaneous access with no cap. As many parallel connections as your team and customers need, with no subscription tier to unlock.
• VPN on demand. Switch the VPN link on or off remotely, from anywhere. The tunnel only runs when you need it.
• Site-to-site. Link several buildings or sites together permanently: the WBoxes build a standing network between installations, which communicate as if on one local network.
• Built-in alarming. The WBox watches the link and your equipment: on a fault or loss of communication you are alerted immediately — remote access doubles as a watchdog.

Remote access is only worth having if you control who reaches what. The Weble VPN platform centralises this management: you grant, adjust and revoke rights without going back on site.

• Per-user visibility. Everyone only sees the sites and hosts they are authorised for; the rest simply does not appear in their list.
• Groups and security policies. Organise hosts into groups (per customer, per site, per role) and apply access rules at group level.
• Per-host control. For sensitive equipment, access control can also be tuned device by device.
• Team and customers. Give each customer access limited to their own installations; your technicians keep the full picture.
• One-click revocation. Rights are granted and revoked from the platform, with nothing to reconfigure on site.

1. The WBox connects to the Weble Cloud as soon as it is commissioned — automatically, with no particular network setup.
2. The link is encrypted end-to-end. Every device and every user is authenticated; your data stays private.
3. You reach your installation from the Weble VPN platform, where you manage access for your team and your customers.

Where the browser shows you a screen, Weble Connect goes further: this Windows application puts your computer directly onto the remote network, at Layer 2 or Layer 3. Your usual engineering tools — ETS for KNX, a BACnet explorer, your PLC programming software — then talk to the on-site equipment as if you were plugged into the cabinet’s switch.

• One-click connection. Pick the site, sign in, and the list of installations you can access appears — connect with a single click.
• Layer 2 or Layer 3. In bridged mode your machine shares the site’s broadcast domain, so BACnet/IP, KNX IP and multicast discovery work natively; in routed mode the overhead stays minimal.
• Managed access. Each user only sees the sites and hosts they are allowed to reach; bandwidth is shown in real time.

Download Weble Connect (Windows) Documentation

A single outbound connection is enough — the same one already used to reach the internet. No inbound opening is required, which reassures even the most demanding IT departments. The technical details are documented on the Weble wiki.