• Secured by Cimetrics SbC3200/SbC3201 BACnet Network Segmentation. Device (BNSD) meets the most demanding BACnet MS/TP to BACnet BACnet/IP router requirements. Can also be configured to support 2 unsecured BACnet MS/TP or 1 BACnet/IP networks segmented from the Secured BACnet/SC network.

    The SbC3200/SbC3201 router is a fully compliant BACnet network layer routers, with additional capabilities to monitor and enforce policy on the BACnet traffic passing between network segments.


    • SbC3200/SbC3201 has 1 Ethernet and 2 RS485 ports.
    • BACnet MS/TP to BACnet/IP router.
    • Connects/Segments unsecured BACnet MS/TP and BACnet/IP networks from secured BACnet/SC networks.
    • Built-in configurable BACnet Firewall Engine - Controls the flow of BACnet traffic between the connected networks (e.g., read only, read/write and block).
    • IT integration via Syslog server: Log real-time events, including BACnet Firewall actions.
    • Wireshark packet capture on Ethernet.
    • Web-based configuration interface.
    • Integrates with the Secured by Cimetrics SbC4000 BACnet/SC management and diagnostic platform (see www.securedbycimetrics.com).


        • SbC BACnet Firewall can reduce the severity of cybersecurity threats in segmented networks.
        • Building Automation System operators can be alerted to unexpected traffic due to misconfiguration or malicious actors.
        • Policy-based monitoring provides valuable visibility into the Building Automation System for IT network and security operations teams via syslog.

      • Specification:

        • Power Adapter Input Voltage: 100—240 VAC, 50-60 Hz
        • Operating Temperature: 0 to 40 C
        • Storage temperature: -30 to 50 C
        • Power consumption: 12 VDC, 10W typical
        • Dimensions: 15.8 x 16 x 2.5 cm
        • Weight: 450 g:
        • Ethernet Ports: (3) 10/100/1000 Mbps
        • Approvals: FCC Class A, CE
        • Router Enclosure: Metal

        BACnet Details:

        • BACnet/SC, BACnet/IP Ethernet, 2 RSRS485 interfaces:
        • Supports BACnet MS/TP to BACnet/IP routing (Clause 6)
        • Supports BACnet/SC TLS 1.3 (all defined cipher suites)
        • BACnet Protocol Revision 16



        Cimetrics SbC3200 and SbC3201 BACnet Network Segmentation Devices (BNSD) route BACnet packets (only BACnet packets) between BACnet MS/TP and BACnet/IP networks as well as BACnet MS/TP and BACnet/IP to BACnet/SC networks. In a typical deployment, a Secured by Cimetrics Appliance (SbC4000) monitors the BNSD’s BACnet Firewall to detect and diagnose network and security issues. The SbC320X/SbC310X BNSDs can monitor and enforce policy on BACnet messages flowing between BACnet MS/TP, BACnet/IP and BACnet/SC network segments. 

        Secured By Cimetrics architechture