> For the complete documentation index, see [llms.txt](https://intelfactor.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://intelfactor.gitbook.io/docs/home/security/remote-access-zone.md).

# Remote access zone

Controlled support access without creating an OT backdoor.

Remote access is optional. It must not change production safety.

### Recommended pattern

* Dedicated VPN gateway into a **Remote Access Zone**.
* Jump host is the only box that can reach Site Data services.
* No direct remote path to cameras or edge nodes.

### Non-negotiables

* MFA required.
* Time-bounded access (maintenance windows).
* Session logging and monitoring.
* Separate accounts for support vs operators.

### Failure mode

Remote access failure must have **zero impact** on inspection continuity.