What Is Digi Remote Reach?
Remote Reach is a built-in capability of Digi Remote Manager (DRM) and Digi Ventus Genesis that provides secure, multi-protocol remote access to IT and OT devices behind Digi routers, eliminating the need for third-party tools. It is available at launch for Digi IX25 and all Digi cellular routers going forward, and is included in both network management platforms at no additional charge.
Out-of-band management (OOBM) made simple. Remote Reach is Digi's answer to out-of-band management for distributed infrastructure. Unlike traditional OOBM approaches that require dedicated hardware or separate VPN tunnels, Remote Reach works through the newest Digi cellular routers released in 2026 and beyond — directly from a browser, over a secure peer-to-peer connection with no Digi cloud in the middle.
Why It Matters
It reduces downtime and costly technician dispatches. Digi Remote Reach allows centralized teams to quickly troubleshoot and recover remote assets from a browser, while serving as a key competitive differentiator that strengthens Digi's position in IT/OT convergence. Remote Reach allows remote teams to quickly connect a browser directly to any device behind a Digi router for management and troubleshooting. Connections are direct and encrypted with no cloud in the path. See Key Advantages for the full list of Digi Remote Reach competitive differentiators.
Who Benefits Most
Two primary segments lead the positioning. The following groups represent the highest-value audiences for Remote Reach at launch.
- Industrial IoT operators — Teams managing PLCs, RTUs, and serial-connected SCADA equipment at remote industrial sites where a failed controller means a stopped production line.
- Distributed enterprises — IT teams responsible for servers, switches, POS systems, and kiosks across many locations, where every unplanned site visit is a budget line item.
Supporting segments include managed service providers, utilities, healthcare facilities, and transportation operators — any team managing remote equipment through a Digi router.
How It Works
Digi Remote Reach uses a direct peer-to-peer connection between your browser and the target device. Digi handles only the initial connection setup — signaling, not data. Once the session is established, diagnostic traffic flows directly between browser and device. Digi never sees it.
Fallback for Legacy Routers
For older routers that cannot run the full Remote Reach stack, a secure proxy fallback is available — single-tenant, temporary, and active only during live connections. This approach is materially better than the always-on competitor proxy pools.
The Digi Remote Reach Interface Inside DRM
Users access Digi Remote Reach directly from the device view in DRM. Endpoints are listed with live status, last-seen timestamps, and quick-launch protocol buttons. Two modes are available:
- Quick Connect: One-off diagnostic sessions without saving an endpoint. Open a connection immediately without any configuration.
- Add Endpoint: Save a named endpoint (device name, IP, protocol, port) for recurring access. Appears in the endpoint list for any team member with access.
Key Advantages
Other cellular router platforms sell remote access as a premium add-on. Remote Reach is included in the management platform for all new Digi cellular solutions released in 2026 and beyond.
- Faster — direct peer-to-peer, no cloud hop. In as fast as a second. Other platforms route sessions through an extra cloud hop, adding latency to every connection.
- More secure — Digi is never in the data path. Device credentials, console output, and diagnostic data never transit a Digi cloud server. This removes the compliance question for regulated environments — utilities, healthcare, industrial.
- More reliable — sessions survive cloud outages. Cloud-proxy architectures are a single point of failure. Remote Reach sessions remain up after initial setup regardless of Digi cloud availability.
- Serial/COM in the browser — Digi exclusive. No other cellular router platform opens serial console access in the browser. This capability unlocks remote diagnostics for serial-connected PLCs, RTUs, and legacy networking gear.
- Included in the subscription — no add-on SKU. Other cellular router platforms sell remote access as a premium add-on. Remote Reach is included in Digi or Ventus subscription for all new router solutions released as of 2026.
- Native inside DRM — one pane of glass. Remote Reach lives alongside device configuration, firmware management, and monitoring. Other platforms separate remote access from device management, requiring operators to switch between tools.
Supported Protocols
Digi Remote Reach supports six protocols covering every class of downstream device — from a Linux server to a legacy serial-connected industrial controller.
RDP SSH VNC HTTP/S HTTP/S Serial / COM — Digi exclusive
The underlying foundation is Apache Guacamole — an open-source, widely audited clientless remote desktop gateway — hardened with Digi's authentication, DRM integration, and direct peer-to-peer transport.
Devices you can reach with Digi Remote Reach:
IT Infrastructure
- Servers (Windows, Linux) — via RDP, SSH, VNC
- Managed switches and routers — via SSH, Telnet, HTTP/HTTPS
- Firewalls and network appliances — via SSH, HTTP/HTTPS
- Out-of-band console servers — via SSH, Telnet
- UPS systems and PDUs — via SSH, HTTP/HTTPS, Telnet
OT / Industrial Field Devices
- PLCs (Programmable Logic Controllers) — via serial/COM
- RTUs (Remote Terminal Units) — via serial/COM
- HMIs (Human-Machine Interfaces) — via serial/COM or RDP/VNC
- DCS (Distributed Control System) components — via serial/COM
- SCADA field devices and data acquisition equipment — via serial/COM
Shared / Converged Environments
- IoT gateways and edge devices — via SSH, HTTP/HTTPS
- Industrial routers and cellular gateways — via SSH, HTTP/HTTPS
- Any IP-addressable LAN device — via HTTP/HTTPS, RDP, SSH, VNC
Head-to-Head Comparison
When it comes to remote access, the architecture behind the solution makes all the difference. Digi Remote Reach delivers direct, secure, browser-based access that keeps your data and your control exactly where they belong.
| Concern |
Competitor (Proxy) |
Digi Remote Reach |
| Where does diagnostic data go? |
Through vendor cloud servers |
Direct to router — Digi never sees it |
| Session speed? |
Extra cloud hop adds latency |
In about a second |
| Cloud outage impact? |
Lose access — single point of failure |
Session stays up after setup |
| Compliance / audit burden? |
Inherit vendor risk posture |
Your control — nothing to inherit |
| Serial / OT support? |
IP protocols only — serial unreachable |
Serial/COM in the browser — Digi exclusive |
| Client software required? |
Varies — some require agents |
Zero install — any modern browser |
| Licensing? |
Add-on SKU or separate tier |
Included in DRM subscription |
| Integrated with device management? |
Separate console or overlay |
Native inside DRM |
Use Cases
Industrial / Manufacturing
PLCs, RTUs, serial SCADA controllers. A failed PLC on a factory floor stops production — Remote Reach means the first response is remote, not a truck roll.
Serial/COM SSH HTTP/S
Distributed Enterprise
Windows servers, POS systems, kiosks, and switches at remote branches — accessible over RDP, VNC, or HTTP from the same DRM console used for device management.
RDP VNC HTTP/S SSH
Utilities and Critical Infrastructure
Remote substation access. Peer-to-peer keeps diagnostic data within your control boundary — critical for regulated environments.
Serial/COM SSH Telnet
Transportation and Fleet
Onboard equipment in vehicles and depots. Diagnose issues and update firmware without rolling a service vehicle.
SSH HTTP/S Telnet
Healthcare Facilities
Networked medical devices and facility management systems. Peer-to-peer eliminates third-party data exposure for HIPAA-sensitive environments.
RDP VNC HTTP/S
Managed Service Providers
Consolidate remote access to customer infrastructure on DRM. Retire parallel RMM tooling. Connection logs support SLA reporting and audit.
All six supported
IIoT and OT Access
Serial/COM Port Support: Critical for PLCs, RTUs, and SCADA
Competitors focus on IT protocols only. Remote Reach bridges IT and OT by exposing serial/COM port console access in the browser — something no other cellular router platform offers.
In industrial environments, serial/COM port console access remains the authoritative diagnostic interface for a large installed base of controllers. Standard IT remote-access tools do not support serial, leaving OT teams without a remote diagnostic path.
Remote Reach is the only solution in this market that exposes serial console access in the browser. For customers managing industrial controllers, legacy networking gear, and embedded systems, it is the only path to remote diagnostics on serial-connected equipment without a truck roll.
The IT/OT convergence trend is accelerating this need. Centralized IT teams are increasingly asked to support OT assets using tools that were not built to reach serial-era equipment. Remote Reach bridges that gap.
Frequently Asked Questions
What is out-of-band management, and how does Digi Remote Reach relate to it?
Out-of-band management (OOBM) is a dedicated access path to manage network devices independently of the primary data network. Traditionally, OOBM required separate hardware like console servers or dedicated management ports. Remote Reach delivers OOBM through the cellular router already at the site — no extra hardware required. The direct peer-to-peer connection through the Digi router is your out-of-band access path.
With Digi Remote Reach, does my data pass through Digi's cloud servers?
No. Digi Remote Manager is used only for initial connection setup (signaling). After the session is established, all traffic — device credentials, console output, and diagnostic data — flows directly between browser and target device. Digi is never in the data path during a live session. The fallback proxy for legacy routers is single-tenant and temporary, active only during live connections.
Is Digi Remote Reach included in my existing DRM subscription?
Yes. Digi Remote Reach is included in the Digi Remote Manager subscription at no additional charge. No add-on SKU, no separate negotiation, no new vendor contract.
Do I need to install client software with Digi Remote Reach?
No. Digi Remote Reach is entirely browser-based, built on Apache Guacamole. It works in any modern browser including mobile. No plugins, no agents, no software to install at the endpoint.
What protocols does Digi Remote Reach support?
Digi Remote Reach supports SSH, Telnet, RDP, VNC, HTTP/S, and Serial/COM. Serial/COM browser access is a Digi exclusive — no other cellular router platform offers this.
How does Digi Remote Reach compare to other cellular router platforms?
Other cellular router platforms routes sessions through their cloud proxy and is sold as a premium add-on. Digi Remote Reach is direct peer-to-peer (Digi is never in the data path), included in the Digi Remote Manager subscription, and adds Serial/COM browser access that other platforms do not offer.
Is session access logged for audit purposes in Digi Remote Reach?
Yes. Every session is logged with user, service/protocol, timestamp, and duration. Logs are exportable as CSV for compliance teams and stored within your Digi Remote Manager account.