Private APN
A private APN routes fleet traffic to a dedicated gateway and into a corporate network, keeping it off the public internet.
Definitions only — a term explained here is not a service we sell.
A private APN keeps device traffic off the public internet from the gateway inward, usually through a dedicated gateway and a tunnel to the enterprise. The APN selects the gateway; it is a routing choice, not encryption by itself.
Public and private paths compared
Public APN
- Device
- Mobile core
- Gateway
- Public internet
- Device
- Mobile core
- Gateway
- Private network
Text description
The figure switches between two states. In the public state, traffic runs from the device through the core and the gateway to the public internet. In the private state, the same path ends at a private network.
How the private path works
A device attaches with an APN string. A public APN resolves to a shared gateway and address pool, and traffic reaches the internet directly. A private APN resolves to a dedicated gateway, and a tunnel, usually IPsec, carries traffic to the enterprise. The enterprise terminates the tunnel, assigns addresses and applies its own firewall, so devices stay reachable only from inside.
What it protects and what to check
The path removes the public internet between the mobile gateway and the enterprise. It does not authenticate the device, encrypt the radio link beyond the mobile standard, or replace SIM and profile controls. SMS does not necessarily follow the APN, so private data does not make SMS private. Confirm the tunnel endpoints, redundancy and address pool. Ask whether the APN is dedicated or shared, and what happens when the tunnel drops. The APN generator documents the string.