Kaspersky Secure Mobility Management

Configuring APN on iOS MDM devices

The Access Point Name (APN) has to be configured in order to enable the mobile network data transmission service on the user's iOS MDM device.

To configure an access point on a user's iOS MDM device:

1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Policies & profiles. In the list of group policies that opens, click the name of the policy that you want to configure.
2. In the policy properties window, select Application settings.
3. Select iOS and go to the Device configuration section.
4. On the APN settings card, click Settings.

   The APN settings window opens.

5. Enable the settings using the APN settings toggle switch.

   The toggle switch in this card does not enable or disable the corresponding functionality on devices. Enabling the toggle switch lets you configure custom settings. Disabling the toggle switch lets you use default settings.

6. In the APN type drop-down list, select the type of access point for data transfer on a GPRS/3G/4G mobile network:
   • Built-in APN. Configure cellular communication settings for data transfer via a mobile network operator that supports operation with a built-in Apple SIM. For more details about devices with a built-in Apple SIM, visit the Apple Support website.
   • APN. Configure cellular communication settings for data transfer via the mobile network operator of the inserted SIM card.
   • Built-in APN and APN. Configure cellular communication settings for data transfer via the mobile network operators of the inserted SIM card and the built-in Apple SIM. For more details about devices with a built-in Apple SIM and a SIM card slot, visit the Apple Support website.
7. If you selected APN, in the APN section click Add.

   The Add APN window opens.

8. Configure the following settings:
   1. In the APN name field, specify the name of the access point.
   2. In the Authentication type drop-down list, select the type of user authentication on the mobile operator's server for network access (internet and MMS).
   3. In the User name field, enter the user name for authorization on the mobile network.
   4. In the Password field, enter the password for user authorization on the mobile network.
   5. In the Proxy server address field, enter the name of the host or the IP address of the proxy server.
   6. In the Proxy server port field, enter the number of the proxy server port.
   7. In the Allowed protocol drop-down list, select the internet protocol.
   8. In the Allowed protocol for roaming drop-down list, select the internet protocol that will be used during international roaming.
   9. In the Allowed protocol for domestic roaming drop-down list, select the internet protocol that will be used during domestic roaming.
   10. If you want devices on IPv6-only networks to be able to access IPv4-only internet services, select the Use the 464XLAT technology check box.
   11. Click OK.
9. If you selected Built-in APN, configure the following settings:
   1. In the Built-in APN name field, specify the name of the access point.
   2. In the Authentication type drop-down list, select the type of user authentication on the mobile operator's server for network access (internet and MMS).
   3. In the User name field, enter the user name for authorization on the mobile network.
   4. In the Password field, enter the password for user authorization on the mobile network.
   5. In the Allowed protocol drop-down list, select the internet protocol.
10. Click OK.
11. Click Save to save the changes you have made.

As a result, the access point name (APN) is configured on the user's mobile device after the policy is applied.