Configuring an APN: How to do it with an MDM
An APN, short for Access Point Names, is used to connect mobile devices to another network. Generally speaking, an APN refers to accessing the internet via mobile data – but an APN can also be configured for internal networks, for example.
Without correctly configured APNs, devices cannot access the mobile internet or other networks. It is therefore important, in the interests of accessibility and security, that companies specify the APNs. In our article, you can find out more about the importance of APNs and the technical options available for configuring them using an MDM.
Why should you pre-configure APNs?
Most people who use mobile devices do not usually need to worry about configuring APNs. These are usually set up automatically on the device if it has a SIM card with mobile data. However, there may be exceptions, for example if you are near a national border and need to enter the APN for the desired network manually in order to connect to it.
In a business context, the aim is not only to ensure that mobile devices connect to the internet, but primarily to guarantee security.
A dedicated APN can be used to connect devices directly to the corporate network without the need for a traditional VPN. This gives companies better control over access to internal data traffic. Security is the most important aspect for companies, as an APN allows the company to block unauthorized persons from accessing certain servers.
In addition to the security aspect, configuring APNs via MDM prevents employees from having to set them up manually, thereby avoiding errors.
By deploying a configuration to all devices via MDM, you ensure that all devices are configured identically, that the connection to the mobile or internal network works immediately, and that support costs are reduced. In sectors such as healthcare, the police and emergency services, which require a controlled mobile network connection, APN configuration is essential.
Configuring APN with an MDM
Companies that need to meet high security standards and manage large numbers of mobile devices benefit from configuring APNs via MDM. Using an MDM enables the automatic setup of APNs and SIM cards during device deployment. This ensures that even hundreds of mobile devices are set up in a standardised manner and receive the appropriate settings based on user groups and permissions.
With an MDM such as MobiVisor, you can distribute APNs to devices via policies. Policies in an MDM encompass all permissions, restrictions and configurations for a company’s mobile devices.
In MobiVisor, you must first navigate to the ‘Access Point Names’ menu item under the policy functions. Then click on ‘Add’.
You will now need to enter some technical details here: Name, APN, Username and Password, Server Proxy Address, Server Proxy Port, Authentication Type (PAP, CHAP, PAP & CHAP for Android and PAP & CAP for iOS), Server, APN Type, etc.
You can find a detailed overview of APN configuration in MobiVisor here: APN Configuration Guide
Once all settings have been configured, the APN can be assigned via a policy. If you have set up multiple APNs, select the correct APN for the relevant user group. Then save the policy and send it to the users. Important to note: Assigning the APN policy does not prevent users from changing APN settings. To do this, you must also use MDM to disable the “Change settings” option. However, this policy severely restricts the device, so some companies choose not to implement it. In this case, you can rely on the MDM’s update mechanism: within a specified timeframe, all policies are automatically updated. This means that any changes made by the user on the device are reset, and the MDM’s settings are applied.
APN FAQs: What else is important to know?
1. If the mobile device already has an APN configured, this will be overwritten by the MDM’s APN policy. This is advantageous if, for example, an incorrect APN has been configured.
2. To prevent the device user from changing the APN, the ability to modify settings must be completely disabled via the MDM. This also prevents other settings, such as Wi-Fi connections, from being altered. Here, a trade-off must be considered: whilst this enhances security, it also increases support costs, as the settings lock cannot be lifted for the user if the internet connection is lost.
Conclusion:
Configuring an APN correctly using an MDM requires a little technical knowledge – but it is quick for IT administrators to implement. The benefits for businesses are clear: greater control over access and enhanced security. In an MDM, different APNs can be set for Android and iOS devices respectively. This allows specific APNs to be assigned to different user groups – depending on their permissions. An MDM also offers the option of applying these settings simultaneously to a large number of devices, which ultimately saves time and minimises the error rate.
