What You Can Fix From 8,000 Kilometers Away, and What Still Needs a Flight

In 2024, our service team logged 47 international service calls for carton forming machines. We resolved 34 remotely—that’s 72%—without boarding a flight. The remaining 13 required on-site visits, and every one involved either a mechanical failure or a safety circuit fault that physically required a reset button press. Most electrical, software, and parameter issues are solvable remotely if the infrastructure is in place.

The foundation is a VPN connection to the machine’s control cabinet. Use hardware VPN routers, not software. An Ewon Cosy 131 or Siemens Scalance M876-4 runs about $400-600 and sits inside the control cabinet, connected to the PLC via Ethernet. It creates an outbound VPN tunnel to a cloud relay server—no inbound firewall configuration needed. This eliminates about 90% of IT objections. The machine calls out to the server; your service laptop connects to the same server. Both sides are clients. No port forwarding, no static IPs.

Security is not optional when you’re connecting to a machine on someone else’s factory floor. Enable two-factor authentication on the VPN account. Restrict access to specific MAC addresses so only your service team’s known laptops can connect. Set the VPN router to require a physical key switch on the control panel to be turned to “Remote” mode before the tunnel activates—this gives the customer positive control over when you can access their machine. Log all remote sessions automatically. I’ve had exactly one customer who pushed back on remote access for security reasons, and the physical key switch plus session logging convinced their IT director.

What can you diagnose remotely? PLC access lets you read the fault log buffer—on a Siemens S7-1200 or Mitsubishi FX5, that’s the last 50 faults with timestamps. You can trace a recurring servo fault to a specific axis and time of day. You can check I/O states in real time, view the HMI screen through VNC, download parameter changes (forming pressure, crease depth timers, glue temperature setpoints), and update PLC firmware and HMI project files with customer approval.

Camera integration takes remote diagnostics to the next level. A $60 USB camera aimed at the forming station or glue application area, connected to an industrial PC in the cabinet, lets you watch the machine run in real time. Combined with PLC data, you can correlate a visual defect with a specific sensor state or motion profile. I once diagnosed a random fold misalignment from my office in Shanghai while the machine was running in a plant in Nairobi. The camera showed the board shifting 3mm during the transfer stroke. The PLC trace showed a pneumatic cylinder taking 180ms to extend instead of the specified 120ms. The cylinder was worn. The customer replaced it from local stock. Total remote session: 45 minutes. An on-site visit would have been four days of travel.

Here’s what you cannot fix remotely and need an on-site visit for: any mechanical component replacement, belt tensioning, chain replacement, bearing replacement, sensor realignment if the bracket has moved, pneumatic cylinder replacement, glue system cleaning, and any safety circuit reset that requires a physical button press per ISO 13849. Also, if the VPN router itself fails, you’re done until someone on-site reboots it. I recommend installing a small UPS on the VPN router and PLC so a brief power flicker doesn’t kill your connection mid-diagnosis.

Real cost case: a customer in Dhaka, Bangladesh, reported intermittent glue application failure. Flight cost from our service hub in Guangzhou: roughly $1,800 round trip plus four days of travel and per-diem, totaling about $3,200. Instead, we connected via VPN. The PLC fault log showed 23 instances of “Glue temperature below setpoint” clustered around 8:15 AM daily. The heater element was failing intermittently during morning warm-up. We walked the customer’s technician through swapping the heater cartridge (a spare included in the shipment), confirmed the temperature curve on the PLC trend graph, and closed the case in under two hours. Three similar cases that year avoided roughly $9,600 in travel costs and prevented an estimated 18 days of downtime.

The remote troubleshooting workflow I train our engineers on: Step one, connect and read the fault log before touching anything. Step two, ask the operator to demonstrate the problem while you watch the camera and I/O monitor. Step three, isolate whether the issue repeats at regular intervals or is random. Step four, check the most recent parameter change log—many “machine faults” are actually operator parameter changes that went wrong. Step five, make one change at a time and test. Never change three parameters simultaneously from 8,000 km away without testing each one. Step six, document every change in a remote session log that the customer approves before you disconnect.

VPN diagnostics won’t eliminate on-site service entirely, but reducing it by 72% means your service engineers spend their travel time on the jobs that actually need them there.