Last updated: August 14, 2026
Access Point Name(APN)
This page explains how to configure the Android APN (Access Point Name) profile in MDM, which serves as the gateway for cellular data connectivity on managed devices. Administrators can use this policy to set up a private, segregated network for organizational devices, separating them from public internet traffic. The page covers all configurable settings including authentication, proxy, protocol, MCC/MNC codes, and MMS options, along with device compatibility across Knox-enabled Samsung and non-Samsung deployments. Dynamic variables are supported for scalable, multi-device profile distribution.
MDM lets you configure Access Point Name(APN), which is mandatory for accessing Internet through cellular data. APN acts as the gateway between the device and the Internet, with the APN configurations usually provided by the carrier service provider. It is pre-configured after the SIM is inserted. However, there are cases where an organization prefers a segregated private network for devices to connect to, through cellular data. This seperates the network communications from public internet traffic and also provides a direct connection to the internal network, effectively acting as a VPN. In such cases, this policy can be used. One major advantage in this policy is the usage of dynamic variables. Dynamic variables ensure APN profile need not be configured seperately for each user, as it automatically fetches the required information from the enrollment details.
- For Non-Samsung devices provisioned as Fully Managed (COSU and COBO, or previously Device Owner), APN is only applicable for devices running on OS version 9.0 and above.
Profile Description
| FEATURE | DESCRIPTION | KNOX-ENABLED SAMSUNG | NON-SAMSUNG | ||
|---|---|---|---|---|---|
| LEGACY | Personally-Owned Work Profile (BYOD, or previously Profile Owner) | Fully Managed (COSU and COBO, or previously Device Owner) | |||
| Configuration Name | Name of the Access Point to be configured. This is usually given by the Administrator and has no effect on the configuration, as this name is used only for reference. |  |  | | |
| Access Point Name(APN) | Specify the Access Point Name to be used by the device to communicate to the Internet, through cellular data. This is provided by the carrier. | | | | |
| Authentication Type | Specify the type of authentication to be used. This is to be configured only if your carrier has setup APN with user name and password. The authentication type specifies the security protocol to be used for sending your user name and password to the server to establish a network connection. The supported protocols are PAP(Password Authentication Protocol) and CHAP(Challenge Handshake Authentication Protocol), with CHAP considered to be more secure. | | | | |
| APN User Name (Can be configured only if Authentication Type is configured) | Specify the user name provided by your carrier, to access Internet using cellular data. Dynamic variable %apn_username% can be used if the profile is to be distributed to multiple devices. | | | | |
| APN Password (Can be configured only if Authentication Type is configured) | Specify the password provided by your carrier, to access Internet using cellular data. Dynamic variable %apn_password% can be used if the profile is to be distributed to multiple devices. | | | | |
| Proxy Server | Specify the proxy to be used, if any. Configuring this routes all the cellular data-based network communications on the device, through the specified proxy. | | | | |
| Port | Specify the proxy port to be used for routing all the cellular data-based network communications on the device, through the specified proxy. | | | | |
| Server address | Specify the address of the WAP Gateway Server, if the managed device uses WAP to access web resources. | | | | |
| Protocol | Specify the protocol which the device must use to access the Internet, through cellular data. Supported protocols are IPv4, IPv6, and PPP. | | | | |
| Mobile Country Code(MCC) | Specify the Mobile Country Code, which along with Mobile Network Code, is used to identify the carrier used by the device. The full list of MCCs can be viewed here. | | | | |
| Mobile Network Code(MNC) | Specify the Mobile Network Code, which along with Mobile Country Code, is used to identify the carrier used by the device. The full list of MNCs can be viewed here. | | | | |
| Access Point Type | Specify the type of data which must use this APN configuration. Supported data types include MMS, SUPL, Dun, Hipri, CBS, Emergency, FOTA, IA, IMS, MCX, XCAP, BIP, VSIM, and Enterprise. | | | | |
| MMS Server Address (Can be configured only if MMS is selected for Access Point Type) | Specify the address of the Multimedia Messaging Service Center(MMSC) to be used by MMS. | | | | |
| MMS Proxy Address (Can be configured only if MMS is selected for Access Point Type) | Specify the proxy to be used for MMS. Configuring this routes all MMS-based communication on the device, through the specified proxy. | | | | |
| MMS Port (Can be configured only if MMS is selected for Access Point Type) | Specify the proxy port to be used for MMS. Configuring this routes all MMS-based communication on the device, through the specified proxy. | | | | |
| Roaming Protocol | Specify the protocol to be used by the device for connecting the Internet via cellular data, when in roaming. Supported protocols are IPv4 and IPv6 | | | | |
| Use as default APN | Specify whether the configured APN must be used as the default service over the other APN services present on the device, if any. | | | | |
| Mobile Virtual Network Operator | Specify the Mobile Virtual Network Operator used in your organization. | | | | |
- When an APN restriction is applied to Non-Samsung devices and Samsung 9.0 or above, the configured APN settings are not visible on the device so that the these settings cannot be modified.
- If default APN option is enabled, the APN settings will be greyed out on the devices.
- One APN profile can be used for one sim card only, if the user wants to use mobile data on both the sim cards then two APN profiles need to be pushed. This is applicable only when the sim cards are different.
Frequently Asked Questions
- What is the Android APN profile and when should I use it? The APN (Access Point Name) profile configures the gateway for cellular data connectivity on managed Android devices. Use it to set up a private, segregated network that separates organizational device traffic from public internet access.
- What settings are configurable in the Android APN profile? The APN profile covers authentication type, proxy server settings, communication protocols, port, MMS settings, and network type configurations for cellular connectivity.
- Does the APN profile apply to Personally-Owned Work Profile (BYOD) devices? APN profiles in ManageEngine MDM are typically applied to Fully Managed (COSU and COBO, or previously Device Owner) corporate devices. For Personally-Owned Work Profile (BYOD) devices, APN settings may be restricted to the work profile scope.