Managing Tunnels

Users with the appropriate privileges can activate and deactivate remote access tunnels from the device’s app settings.

Activating a Tunnel

1. Open a device in your project.
2. Find the running app in the apps list.
3. Click the settings icon.
4. Go to the Remote Access section.
5. Toggle the tunnel on for the desired port.

When activated:

• HTTP/HTTPS ports: A public URL is generated. Click the URL or the globe icon on the device’s app list to open the service in your browser.
• TCP/UDP ports: A remote port number is allocated and shown in the settings. Use this port with your client application (e.g., VNC viewer, TIA Portal).

The Globe Icon

When a tunnel is active, a globe icon appears on the device’s app card in the map view and app list. Clicking it opens the main remote access URL (the port marked with main: true in the port template).

Deactivating a Tunnel

Toggle the tunnel off in the Remote Access section of the app settings. The public URL or port is released immediately.

Audit Logging

Every tunnel activation and deactivation is logged:

• Who activated or deactivated the tunnel
• When the action occurred
• Which port was affected

Additionally, actual usage of the tunnel (connections through the proxy) is logged. This audit trail is available in the device’s settings under the audit log panel.

Required Privileges

To manage tunnels, a user needs at least update privileges on the device. The project owner and administrators have tunnel access by default.