The gateway is usually the last component added to a control panel and the first one people regret. It gets specified late, and the choice is often made on price or on whatever the last project used. Yet this small device decides whether the machine builder can reach the machine once it has left the factory, what data comes back from it, and how well it stands up to a decade of security threats. A few questions asked early save a great deal of retrofitting later.
How the machine will reach the internet
The first question is the most practical one. Every site is different, and the gateway has to cope with all of them. Some customers will happily give the machine a wired connection on their plant network. Others refuse to let any third party device touch their infrastructure, in which case the machine needs its own route out over 4G. Some sites have neither a spare cable nor mobile coverage in the right corner of the hall, and wifi to an access point is the only realistic option.
Edge gateway router products differ most in how many of these routes they support at once. A model with a single WAN port is fine when the site is known in advance. A model with dual WAN, for example one Ethernet uplink plus a 4G modem, lets the same panel design go to any customer and fall back to mobile when the plant network is unavailable. Devices in the IXON range, for instance, come in variants with Ethernet only, with 4G and with wifi, on the same footprint, so the panel drawing does not change between them.
Which protocols the data logger has to speak
The second question is what the gateway should read from the machine. Remote access alone only requires the gateway to pass traffic through. Data logging requires it to understand the controller. The common industrial protocols are OPC UA, Modbus TCP and vendor specific ones such as Siemens S7, and a gateway that supports all three covers most PLCs from the major manufacturers. Check the exact list against the controllers, drives and HMIs actually used.
Almost as important as the protocols is what happens when the connection drops. A gateway with store and forward keeps logged values in local memory during an outage and sends them once the link is back, so trend data has no gaps.
Certifications the customer’s IT team will ask about
Sooner or later a customer’s IT or security department will ask for evidence that the device is fit to sit on their network. For the industrial world the reference standard is IEC 62443, and part 4-2 of it applies to individual components such as gateways. A device certified to IEC 62443-4-2 has been independently assessed on matters like unique credentials, secure updates and vulnerability handling. That certificate shortens a lot of conversations.
Beyond the security standard, the usual electrical and environmental approvals for panel equipment apply, and a DIN rail form factor keeps installation simple. For the newer generation of gateways, features such as a hardware security module and an integrated eSIM for mobile connections are becoming normal.
Security updates for the life of the machine
The last question is the one most often skipped, and it matters most. A machine is expected to run for ten or fifteen years. Consumer network equipment stops receiving firmware updates long before that, and an unpatched gateway on a plant network is a liability for both the machine builder and the customer. The question for any supplier is how long security updates are guaranteed and whether they install automatically.
Regulation is moving in the same direction. The EU Cyber Resilience Act places obligations on manufacturers of connected products to handle vulnerabilities and provide updates over a defined support period. IXON states that its gateways ship with unique credentials per device, encryption enabled by default and unused ports switched off, with automatic security updates for five years. Whatever the supplier, a gateway is part of the machine and needs the same longevity as the drives next to it.
Putting the answers together
Connectivity options, protocol support, certification and update lifecycle are four separate questions, but they usually point in the same direction. The cheapest device that works on the test bench is rarely the one that still works at a customer in another country in year eight. Deciding these points while the panel is still on the drawing board costs an afternoon. Deciding them after the first machine has shipped costs a site visit.