BMS Profiler Policies

Overview

Create custom profiler policies to identify BMS devices by their network characteristics.

Common BMS Vendors

  • Honeywell

  • Johnson Controls

  • Siemens

  • Schneider Electric

  • Trane

  • Carrier

Profiler Conditions

DHCP Fingerprinting

DHCP Class Identifier CONTAINS "BACnet"
DHCP Class Identifier CONTAINS "Honeywell"
DHCP Vendor Class CONTAINS "HVAC"

MAC Address OUI

MAC:OUI EQUALS "00:A0:C9" (Intel - common in controllers)
MAC:OUI EQUALS "00:80:F4" (Telemecanique)

Port-based

Destination Port EQUALS 47808 (BACnet)
Destination Port EQUALS 502 (Modbus)
Destination Port EQUALS 44818 (EtherNet/IP)

Creating Custom Profile

  1. Navigate to Work Centers > Profiler > Profiling Policies

  2. Click Add

  3. Configure:

    • Name: BMS-HVAC-Controller

    • Minimum Certainty Factor: 10

    • Parent: BMS-Device (create if needed)

    • Conditions: Add profiler conditions

Endpoint Identity Groups

Create hierarchy:

BMS-Devices
├── BMS-HVAC
├── BMS-Lighting
├── BMS-Access-Control
├── BMS-Fire-Safety
└── BMS-Elevator