Techniques to facilitate communication between remote industrial assets are disclosed herein. In at least one implementation, a computing system provides a virtual private network (VPN) service for an industrial automation network of an industrial automation enterprise. The computing system communicates with a first gateway system to establish a first connection between a first industrial asset and the VPN service for the industrial automation network. The computing system also communicates with a second gateway system to establish a second connection between a second industrial asset and the VPN service for the industrial automation network, wherein the second industrial asset is located at a disparate location than the first industrial asset. Bi-directional communications are routed between the first industrial asset and the second industrial asset to enable interactions between the first industrial asset and the second industrial asset as if they were directly connected over a same local communication network.