You cannot secure what you cannot see. Most organisations with routers in the field have a rough idea of how many there are, but not which firmware they run, which SIMs they use or who can log in. An audit fixes that, and it is usually much quicker than people expect.
What to record for every device
- Identity: make, model, serial number and where it is installed.
- Firmware: the version it runs today, and whether the manufacturer still supports that model.
- Connectivity: SIM, network, APN and IP address type (dynamic, fixed public, private APN).
- Access: how people reach it (VPN, vendor platform, open ports) and who has the passwords.
- Purpose: what it connects (cameras, PLCs, meters, tills) and who to call if it fails.
Where the information comes from
If your routers are on a remote management platform such as Teltonika RMS, most of this is already there: model, serial, firmware, signal and status for every device. Export it and you have the start of your audit. For routers that are not managed, the information comes from installation records, SIM bills (every active SIM is a device somewhere) and, where needed, a visit or a remote login to each one. Bringing those routers onto a management platform as you go is the best way to make sure the next audit is quick.
Spotting the risks
- Firmware that is several versions behind, or models the manufacturer no longer updates.
- Default or shared passwords, or the same password on every site.
- Web management or remote desktop open to the internet on a fixed public IP SIM.
- Former staff or contractors who still have access.
- Devices nobody can identify: these should be found, checked and either brought under management or removed.
Prioritise, then fix
Start with anything exposed to the internet and anything end of life, then work through firmware updates and passwords. Our guides to firmware updates and patching and secure remote access cover the fixes.
Keep it current
An audit is a snapshot. The aim is a list that stays right: every new installation added on the day, devices removed when they are retired, and a quick review every few months. A remote management platform does most of this for you. See our IoT and OT security hub for the bigger picture.
Frequently asked questions
How long does an audit take?
For routers already on a management platform, an hour or two to export and review. For unmanaged estates it depends on the records you have; SIM bills and installation records are the quickest starting point.
What is the biggest risk you usually find?
Routers with web management or remote access open to the internet on public IP SIMs, often still on old firmware. Moving those behind a VPN or vendor platform is usually the first fix.
Can you help audit our routers?
Yes. Talk to us about what you have and how it is managed today, and we will help you plan the review.
Need help with your project?
Talk to our UK technical team about the right router, SIM and antenna.