{"answer":"Put the contractor into a separate VPN identity or group and apply firewall rules that permit access only to the required device, port and time window. Where practical, place the target equipment in its own VLAN and deny access to router administration and other site networks.\n\nUse named accounts rather than shared passwords, record connection logs and remove access when the task is complete. A jump host or remote-management platform can provide an additional control point. Test the rules from the contractor\u2019s perspective\u2014being able to connect does not prove that unwanted paths are blocked. The exact controls depend on the router and management system, so capability should be confirmed before deployment.","approval_status":"draft_for_dave_review_pending_public_brain_audit","approved":false,"category":"Secure Remote Access Without Public IP","category_slug":"secure-remote-access-without-public-ip","created_at":"2026-06-06T09:10:00+00:00","daily_publish_cap":2,"date_published":"2026-06-06","display_date":"2026-06-06","drip_status":"review_seed","freshness_note":"Confirm current model specifications, carrier compatibility, stock, pricing, firmware, warranty and commercial terms directly with Comset where they affect a decision.","id":"comset-qa-030","image_ids":["comset-product-network-management-system","comset-support-dyndns","comset-support-https-settings","comset-category-hero-010-secure-remote-access-without-public-ip"],"language":"en-AU","last_updated":"2026-06-06T09:10:00+00:00","matched_image_ids":["comset-product-network-management-system","comset-support-dyndns","comset-support-https-settings","comset-category-hero-010-secure-remote-access-without-public-ip"],"public_brain_verified":false,"publish_status":"review_preview","published_at":"2026-06-06T09:10:00+00:00","question":"How can remote access be restricted so a contractor can reach one device without being given access to the whole site network?","question_intent":"public_guidance","question_type":"deployment_or_troubleshooting","real_image_mapping_status":"mapped_to_approved_comset_catalogue_v1_6","site_key":"comset","slug":"how-can-remote-access-be-restricted-so-a-contractor-can-reach-one-device-without-being-given-access-to-the-whole-site-network","source":"Comset public website scrape and stable industrial-networking explanation","source_record_ids":["comset-source-0049","comset-source-0269","comset-source-0301","comset-source-0305"],"source_type":"client_source_plus_stable_explanatory_context","source_urls":["https://comset.com.au/product/remote-management-software","https://comset.com.au/product/network-management-system","https://comset.com.au/faq"],"tenant_slug":"comset","updated_at":"2026-06-06T09:10:00+00:00"}