prywatnyapn.pl Call +48 698 355 667
PL EN
Request a proposal

Device management

The SIM in the device is half the lock. MDM is the other half.

This is not a console standing beside the network. Enrolment, the MDM profile, the private APN and the tunnel to headquarters are one path. FAMOC, Knox and zero-touch are tools on that path.

World Support Service sells and deploys MDM, including FAMOC and Samsung Knox, and is an Android Enterprise zero-touch reseller. The named mobile-network partner is Play. We are not an official FancyFon or Samsung partner. There is no price list.

Request a proposal APN types and connection types +48 698 355 667

Complete solution

SIM + private APN + MDM + hardware (Peplink) + support

Enrolment comes first: Android zero-touch or Knox Mobile Enrollment. FAMOC or Knox Manage then pushes the profile, and the SIM has only the operator’s private APN, an IPsec tunnel and the firewall at headquarters. The MDM server is reached from that network, not from the phone’s public gateway. We add Peplink when the edge is a cabinet or a vehicle, not the handset itself.

Path: zero-touch or Knox Mobile Enrollment, an MDM profile, the private APN, an IPsec tunnel, the firewall and headquarters. The MDM server is inside that network. Peplink joins the APN as edge hardware. The internet has no route. Enrol MDM APN IPsec Firewall HQ ZT / KME FAMOC / Knox operator APN · Wi-Fi · kiosk VPN · wipe Peplink hardware MDM server inside Internet no route
Enrolment hands the device to the console. SIM traffic uses the private APN and the tunnel to headquarters. The console is on that side. Peplink is the edge for a cabinet or a vehicle.
  1. Enrolment Zero-touch or Knox Mobile Enrollment, before anyone can skip the wizard.
  2. Profile The private APN pinned, Wi-Fi and other APNs blocked, a kiosk app, always-on VPN, remote wipe. That lever exists on a fully managed device.
  3. Radio The session uses only the operator’s private APN. The SIM list stays with the operator.
  4. Tunnel IPsec ends on the customer firewall. The phone has no internet breakout of its own.
  5. Console and hardware The MDM server sits in this network, behind the firewall. Peplink carries the edge SIMs in a cabinet and in a vehicle.

Three separate paths

Console

FAMOC

FancyFon’s platform. Fully managed Android, a work profile and kiosk mode, plus Apple devices. Remote wipe and app policy.

Hardware

Samsung Knox

Knox Vault on selected Galaxy models, Knox Mobile Enrollment, Knox Manage and Knox Configure.

First boot

Android zero-touch

We are a zero-touch reseller. The device enrols to the company the first time it powers on.

NIS2 and KSC

A device inventory, a forced configuration and the ability to wipe lost hardware support a description of technical measures: access control, data on the device, and a response when equipment leaves the company. We do not decide whether the organisation is an essential or important entity. We do not certify compliance with the Polish national cybersecurity act or with NIS2.

NIS2 / KSC

Device count, the role (POS, fleet, scanner, machine) and whether the hardware is company-owned go in the form. Prices are not published.

Related

On the same path

Call Request a proposal