Fidelity Secures Remote Access To On Property Operational Technology With Pangolin
Fidelity and Smart Building Technologies are the industry leaders in building automation systems, energy management systems, facility monitoring services, critical systems monitoring, and smart lighting solutions. Using Pangolin, Fidelity and SBT provide remote access for engineers and contractors to properties they control using simple, sharable, and secure credentials. They were able to replace legacy vpn-in-a-box solutions no longer meeting their needs.
Challenge
At Fidelity and Smart Building Technologies, operators are managing hundreds of properties, each with its own mix of building automation, energy management, and monitoring systems. Previously, they were deploying Tosibox devices (a "VPN-in-a-box" solution) to each location and provisioning contractors and internal personnel with physical, USB-based access credentials. They needed a unified, drop-in replacement that kept buildings logically separated and secure while still letting them generate access credentials quickly for external personnel.
Solution
Pangolin delivered an all-in-one remote access hub that provides identity-based, context-aware connections to every system on a property. Each site maps to a property, so access to one building's operational technology never bleeds into another's, and administrators can grant a contractor or engineer scoped access to only the resource they need to work on. Instead of shipping and tracking physical USB credentials, admins issue easy-to-generate, ephemeral access tied to a person's identity, so credentials is handed out in minutes and revoked the moment a job is done. Because every connection is authenticated and encrypted end-to-end using a lightweight single binary, there is no VPN hardware to install, ship, or maintain at each site.
Impact
- Easy VPN and web based access provided to contractors and internal personnel
- Physical USB credentials replaced with ephemeral, identity-based access that can be issued or revoked in minutes
- Properties stay logically isolated from one another, even though access is managed from a single central hub
“We finally found something that gracefully handles reverse proxies. It’s checked every damn box we have.”
David GrosIT Consultant
