• Secured by Cimetrics SbC3100/SbC3101 BACnet Network Segmentation Device (BNSDs) segments nonsecure BACnet/IP networks from secure BACnet/SC networks without compromising performance, reliability or security.

    The SbC3100/SbC3101 BNSDs are fully compliant BACnet network layer routers, with additional capabilities to monitor and enforce policy on the BACnet traffic passing between network segments.


    • Three Ethernet ports: Two for BACnet segmentation and a dedicated port for configuration
    • Connects/Segments unsecured BACnet/IP or secured BACnet/SC networks from secured BACnet/SC Networks.
    • Built-in configurable BACnet Firewall Engine - Controls the flow of BACnet traffic between the connected networks (read only, read/write and block).
    • IT integration via Syslog: Log real-time events, including BACnet Firewall actions.
    • Supports OpenVPN Community Edition that enables non-BACnet communication with devices on the unsecured and secured BACnet Ethernet networks.
    • Wireshark packet capture on Ethernet.
    • Web-based configuration interface.
    • Integrates with the Secured by Cimetrics BACnet/SC management and diagnostic platform (see www.securedbycimetrics.com).


        • SbC BACnet Firewall can reduce the severity of cybersecurity threats in segmented networks.
        • Building Automation System operators can be alerted to unexpected traffic due to misconfiguration or malicious actors.
        • Policy-based monitoring provides valuable visibility into the Building Automation System for IT network and security operations teams via syslog.

      • Specification:

        • Power Adapter Input Voltage: 100—240 VAC, 50-60 Hz
        • Operating Temperature: 0 to 40 C
        • Storage temperature: -30 to 50 C
        • Power consumption: 12 VDC, 10W typical
        • Dimensions: 15.8 x 16 x 2.5 cm
        • Weight: 450 g:
        • Ethernet Ports: (3) 10/100/1000 Mbps
        • Approvals: FCC Class A, CE
        • Router Enclosure: Metal

        BACnet Details:

        • BACnet/SC and BACnet/IP Ethernet interfaces:
        • Supports BACnet/SC TLS 1.3 and 1.2 (all defined cipher suites)
        • BACnet Protocol Revision 1



        Cimetrics SbC3100 and SbC3101 BACnet Network Segmentation Devices segment unsecured BACnet/IP and BACnet/SC networks from BACnet/SC networks. In a typical deployment, a Secured by Cimetrics Appliance (SbC4000) monitors the BNSD’s BACnet Firewall to detect and diagnose network and security issues. The SbC3100/SbC3101 BNSDs monitor and enforce policy on BACnet messages flowing between BACnet/IP and BACnet/SC network segments. 

        Secured By Cimetrics architechture