Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I'm interested in what (if any) the practical security implications of a company making use of a Private APN are as opposed to using a standard network provided APN and VPN connection back to the main corporate network.

On the face of there's some benefit in that VPN software might not be needed but I was thinking that there could be risks around how the end devices are authenticated and difficulties in restricting their access appropriately once connected.

Also are there any known attacks that take advantage of the use of network provided APNs, which could be mitigated by using a private one?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

One of the disadvantages from a security point of view of a private APN, if I remember correctly, is that you are only securing the data traffic from the APN onwards, rather than from the device onwards. And unless you are using device policies it is trivially simple to change by the user and by an app.

As for attacks I know of none, my Google foo only brought up this article - How Mobile Carriers Expose Us to Wi-Fi Attacks - and others which discuss APN hijacking by malicious iOS apps.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.