Security

FactoryTalk® Optix™

uses a layered security approach to protect users, applications, and data across development, deployment, and operation. It combines identity‑based authentication through

FactoryTalk® Hub™

, role‑based access control (RBAC) within applications, and industry‑standard secure communications such as OPC UA with certificate‑based trust and encryption. For remote workflows,

FactoryTalk® Optix™

uses

FactoryTalk® Remote Access™

to support encrypted, outbound‑initiated connectivity without exposing on‑premises systems.

Devices with Optix embedded are secured using a combination of local runtime security and controlled remote connectivity to protect the device and application while avoiding direct exposure of the device to external networks. Regardless of physical proximity to the device, user authentication through

FactoryTalk® Optix™

is required and RBAC determines what you can view, operate, configure, or maintain when interacting directly with the device.

When remote access is required,

FactoryTalk® Remote Access™

secures the device with a VPN connection. You can reach the device remotely without opening inbound firewall ports or exposing the device IP address to the internet. Remote access sessions are authenticated, encrypted, and auditable, and access can be granted or revoked centrally.