Configuring the Access Point Name (APN)

This section provides instructions on how to connect a mobile device to cellular data services on a mobile network.

Configuring APN on Android devices (only Samsung)

APN can be configured only for Samsung devices.

A SIM card must be inserted to be able to use an access point on the user's mobile device. Access point settings are provided by the mobile operator. Incorrect access point settings may result in additional mobile charges.

To configure the Access Point Name (APN) settings on a user's mobile device:

1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Policies & profiles. In the list of group policies that opens, click the name of the policy that you want to configure.
2. In the policy properties window, select Application settings.
3. Select Android and go to the Samsung Knox settings section.
4. On the APN settings card, click Settings.

   The APN settings window opens.

5. Enable the settings using the APN settings toggle switch.

   The toggle switch in this card does not enable or disable the corresponding functionality on devices. Enabling the toggle switch lets you configure custom settings. Disabling the toggle switch lets you use default settings.

6. Specify the following access point settings for connecting the user to the data service:
   • In the APN type drop-down list, select the type of access point (APN) for data transmission on a GPRS/3G/4G mobile network:
     • Internet. Connection of the user's mobile device to the internet.
     • MMS. Exchange of MMS multimedia messages.
     • Internet and MMS. Connection to the internet and exchange of multimedia messages. This is the default value.
   • In the APN name field, specify the name of the access point.
   • In the MCC field, enter the mobile country code (MCC).
   • In the MNC field, enter the mobile network code (MNC).
7. If you have selected MMS or Internet and MMS as the type of access point, specify the following additional MMS server settings in the MMS server section:
   • In the MMS server name field, specify the full domain name of the mobile carrier's server used for MMS exchange (for example, mms.mobile.com).
   • In the MMS proxy server address field, specify the network name or IP address of the proxy server.
   • In the MMS proxy server port field, specify the port number of the mobile carrier's server used for MMS exchange.
8. In the Authentication section, specify the authentication settings:
   • In the Authentication type drop-down list, select the type of authentication of the mobile device user that will be used on the mobile carrier's server for network access. By default, user authentication is not required. The following types are available:
     • None. User authentication is not required to access the mobile network.
     • PAP (Password Authentication Protocol). An authentication protocol that uses passwords as plain non-encrypted text.
     • CHAP (Challenge Handshake Authentication Protocol). A request-response authentication protocol that uses standard MD5 hashing to encrypt the response.
     • Concurrently. Combined use of CHAP and PAP protocols.
   • In the User name field, enter the user name for authorization on the mobile network.
   • In the Password field, enter the password for user authorization on the mobile network.
9. In the Network section, specify the following network settings:
   • In the Network name field, enter the name of the network.
   • In the Server address field, specify the network name of the mobile carrier's server through which data transmission services are accessed.
10. In the Proxy server section, specify the following proxy server settings:
    • Select the Use a proxy server check box to enable the use of a proxy server. This check box is cleared by default.
    • In the Proxy server address field, specify the network name or IP address of the mobile carrier's proxy server for network access. This field is available only if the Use a proxy server check box is selected.
    • In the Proxy server port field, specify the port number of the mobile carrier's proxy server for network access. This field is available only if the Use a proxy server check box is selected.
11. Click OK.
12. Click Save to save the changes you have made.

Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.

Configuring APN on iOS MDM devices

The Access Point Name (APN) has to be configured in order to enable the mobile network data transmission service on the user's iOS MDM device.

To configure an access point on a user's iOS MDM device:

1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Policies & profiles. In the list of group policies that opens, click the name of the policy that you want to configure.
2. In the policy properties window, select Application settings.
3. Select iOS and go to the Device configuration section.
4. On the APN settings card, click Settings.

   The APN settings window opens.

5. Enable the settings using the APN settings toggle switch.

   The toggle switch in this card does not enable or disable the corresponding functionality on devices. Enabling the toggle switch lets you configure custom settings. Disabling the toggle switch lets you use default settings.

6. In the APN type drop-down list, select the type of access point for data transfer on a GPRS/3G/4G mobile network:
   • Built-in APN. Configure cellular communication settings for data transfer via a mobile network operator that supports operation with a built-in Apple SIM. For more details about devices with a built-in Apple SIM, visit the Apple Support website.
   • APN. Configure cellular communication settings for data transfer via the mobile network operator of the inserted SIM card.
   • Built-in APN and APN. Configure cellular communication settings for data transfer via the mobile network operators of the inserted SIM card and the built-in Apple SIM. For more details about devices with a built-in Apple SIM and a SIM card slot, visit the Apple Support website.
7. If you selected APN, in the APN section click Add.

   The Add APN window opens.

8. Configure the following settings:
   1. In the APN name field, specify the name of the access point.
   2. In the Authentication type drop-down list, select the type of user authentication on the mobile operator's server for network access (internet and MMS).
   3. In the User name field, enter the user name for authorization on the mobile network.
   4. In the Password field, enter the password for user authorization on the mobile network.
   5. In the Proxy server address field, enter the name of the host or the IP address of the proxy server.
   6. In the Proxy server port field, enter the number of the proxy server port.
   7. In the Allowed protocol drop-down list, select the internet protocol.
   8. In the Allowed protocol for roaming drop-down list, select the internet protocol that will be used during international roaming.
   9. In the Allowed protocol for domestic roaming drop-down list, select the internet protocol that will be used during domestic roaming.
   10. If you want devices on IPv6-only networks to be able to access IPv4-only internet services, select the Use the 464XLAT technology check box.
   11. Click OK.
9. If you selected Built-in APN, configure the following settings:
   1. In the Built-in APN name field, specify the name of the access point.
   2. In the Authentication type drop-down list, select the type of user authentication on the mobile operator's server for network access (internet and MMS).
   3. In the User name field, enter the user name for authorization on the mobile network.
   4. In the Password field, enter the password for user authorization on the mobile network.
   5. In the Allowed protocol drop-down list, select the internet protocol.
10. Click OK.
11. Click Save to save the changes you have made.

As a result, the access point name (APN) is configured on the user's mobile device after the policy is applied.