Request DemoSign Up
Critical Field Networks

Centralised Modem Management for Critical Field Networks

Manage the modems and routers on the closed networks that carry camera, alarm and access control traffic from the centre.

Sales & EnterpriseRequest Demo
Centralised Modem Management for Critical Field Networks

In most organisations camera footage, alarm signals and access control records travel on a closed network that is separated from the internet and carried to the centre over an operator APN or MPLS. The weakest link in this network is usually the modem at the branch: an outside company does the installation, the password is standard, the firmware has not been updated for years and nobody knows exactly which device is where. OBIFI makes this layer visible and manageable.

The problems encountered

Device passwords that have to be handed to installation companies, authorisations that cannot be taken back afterwards, NVRs that can be discovered with a port scan, servers left outside the firewall, lines paralysed by a simple DDoS, branch cameras that can be disabled remotely, post-incident review being impossible because there is no central log, inventory that cannot be kept current, and use of the line outside its purpose going unnoticed. The common cause of all of these is that devices are managed one by one, from the local interface and with permanent passwords.

How OBIFI solves it

Management is brought to the centre; devices run OpenWrt-based OBIFI firmware, their interfaces are locked and no free access remains in the field. Default passwords are changed in bulk on day one. Installation, replacement and fault intervention run through an approval flow; the technician does the work with a temporary token. Every device is identified per circuit, port and VLAN with DHCP Option 82, and static IPs go away. Every modem reaches only the defined destinations; an alarm is raised the moment a rule is breached. All operations are collected in an immutable log and kept with an NTP timestamp and hash verification. Faults drop into the existing CRM automatically, and NVR/alarm emails are parsed and turned into events. Physical movement of a modem is caught with base station data.

Deployment model

It is installed on-premise, in an environment closed to the internet, with active-active HA. Pilot verification is carried out at agreed branches before acceptance. Administrator and end-user training and installation and usage manuals are part of the delivery. A maintenance service with 24/7 call acceptance and a defined response time is offered for critical software-related faults; patch processes and remediation times for vulnerability reports are given in writing in the contract.

Who it is for

Public institutions with a widespread branch network, banks and retail chains, security operations centres, alarm monitoring centres, and critical infrastructure operators.

Let us talk about a pilot deployment

Sales & Enterprise