# Solving VTScada Remote Access Limitations

- Link: https://www.agilicus.com/webinar/2026-09-10-solving-vtscada-remote-access-limitations/
- Published: 2026-08-21T18:16:47+00:00
- Author: aman bhogal

# Solving VTScada Remote Access Limitations

## View On Demand

If you are managing or designing SCADA networks today, you are caught in a crossfire.
Your clients require a secure implementation, their corporate IT is locking down
networks, and compliance mandates are stricter than ever. But at the end of the 
day, you’ve been handed a project and told to get it done. You need to deliver reliable,
remote VTScada access to operators, and the network topology is actively working
against you.

Historically, remote access meant convincing IT to open a firewall port. Today, 
port forwarding is universally recognized as a critical vulnerability, a guaranteed
way to get flagged on Shodan and breached by automated botnets. 

As remote sites increasingly rely on Starlink and Cellular connections, legacy connectivity
breaks. Carrier-Grade NAT (CGNAT) means you don’t get a routable public IP. Inbound
connections are dropped, and the standard firewall cannot solve upstream routing
limitations.

**So, how do you deliver seamless, highly secure access to VTScada, and enable critical
integrations like Twilio IVR, when you can’t open a port and don’t control the public
IP?**

### **Who Should Attend?**

If you are a SCADA Engineer, Systems Integrator, Network Administrator, or Implementation
Specialist who is responsible for solving deployment roadblocks and making the technology
actually work in the field, this session is for you.

## **Webinar Highlights **

### The Speaker

[⌊don-bowman⌉⌊don-bowman⌉[

#### **Don Bowman, CEO at Agilicus**

Founder and CEO of Agilicus, Don Bowman is an expert in cloud, security, and networking
with 30 years of experience in global Internet, technology, public policy.

In this pragmatic, engineering-focused webinar, we break down the specific networking
challenges of modern SCADA deployments. We will map out exactly how to bypass CGNAT,
eliminate the need for complex VPNs, and utilize Agilicus to build an outbound-only,
zero-trust architecture specifically tailored for VTScada.

### **What We Will Cover:**

 * **The Anatomy of a Modern Network Blockade:** A technical breakdown of why Starlink
   and cellular providers use CGNAT, why traditional DDNS and port forwarding fail,
   and why your customer’s expensive edge firewall cannot solve this specific problem.
 * **Architecting an Outbound-Only Connection:** How to transition from a vulnerable“
   listening” architecture to an outbound-only tunnel. We will show you how to securely
   publish internal SCADA resources without exposing a single port to the public
   internet.
 * **Mapping the Twilio IVR / Callout Data Flow:** Twilio voice integrations require
   cloud webhooks to reach your local server. How do you allow cloud-to-on-prem 
   communication without punching holes in your firewall? We will whiteboard the
   exact data flow and demonstrate how to route these webhooks securely.
 * **Empowering the VTScada Thick Client from Anywhere:** Thin clients are great,
   but power users need the Thick client. We will demonstrate how to deliver native
   VTScada Thick client performance over any connection, completely eliminating 
   the need for cumbersome desktop VPN clients.
 * **Integrating Identity and SSO at the Edge:** How to lock down VTScada access
   by placing it behind your customer’s existing Identity Provider (IdP) such as
   Microsoft Entra ID (Azure AD, Okta, or Google Workspace) enforcing Multi-Factor
   Authentication (MFA) and Single Sign-On (SSO) before a single packet reaches 
   the SCADA server.

By attending this webinar, you’ll learn how to:

 * **Bypass CGNAT on Starlink & Cellular:** Securely access VTScada over dynamic,
   non-routable mobile connections without paying for static IPs or fighting ISP
   routing.
 * **Run VTScada Thick & Thin Clients Anywhere:** Deliver native desktop performance(
   Thick client) and browser access (Thin client) remotely using Single Sign-On (
   SSO) and MFA, completely eliminating clunky VPNs.
 * **Fix Broken Twilio IVR Callouts:** Route cloud webhooks down to on-premises 
   servers so automated voice callouts work over restrictive network topologies.
 * **Eliminate Port Forwarding Entirely:** Transition to an outbound-only architecture
   that keeps your SCADA infrastructure hidden from internet scanners like Shodan.

## LEARN MORE ON THE TOPIC

Keeping remote industrial sites running smoothly for tools like VTScada and Ignition
requires constant monitoring and occasional outside help. But connecting to these
locations securely shouldn’t require an expensive IT overhaul.

Agilicus AnyX is the only product that safely bridges the gap between modern cloud
services (like Twilio), standard internet connections (like Starlink), and your 
remote industrial equipment: all without requiring complex hardware.

[READ MORE](https://www.agilicus.com/use-case/zero-trust-scada-alarm-monitoring/)

BOOK A MEETING

Ready To Learn More?

Agilicus AnyX Zero Trust enables any user, on any device, secure connectivity to
any resource they need—without a client or VPN. Whether that resource is a web application,
a programmable logic controller, or a building management system, Agilicus can secure
it with multi-factor authentication while keeping the user experience simple with
single sign-on.

[BOOK A MEETING](https://www.agilicus.com/book-calendar-meeting/)

![Agilicus AnyX platform logo, horizontal orientation.](https://www.agilicus.com/
www/9f758437-agilicus-logo-horizonta.svg)

info@agilicus.com, +1 ‪519 953-4332‬

300-87 King St W, Kitchener, ON, Canada. N2G 1A7

[⌊partner⌉⌊partner⌉[