APNZone — Private APN Security Platform
Secure your mobile and IoT workforce with private APN security orchestration. Enforce Zero Trust, SIM control and device posture in one platform.
National Law Enforcement Agency
The National Law Enforcement Agency is an EMEA public-safety organization that uses S3M's APNZone and ConnGuard NAC to run more than 350,000 field endpoints over a private APN. SIM-based identity is fused with network access control, so devices authenticate first, stay invisible to the public internet, and can be isolated centrally and instantly.
350K+
endpoints, National Law Enforcement Agency
Challenge
The agency's responsibility is national public safety. Hundreds of thousands of devices — vehicles, mobile data terminals, handheld units, and field equipment spread across an entire country — operate far beyond the walls of any building and connect over cellular networks the agency does not own. Traditional network security assumes a perimeter you can defend; the agency has 350,000 of them, and every single one is mission-critical.
Solution
APNZone connects every field device through a private APN, so it never touches the public internet and is effectively invisible to anyone outside the network. SIM-based identity is fused with network access control, so a device is authenticated and its policy is enforced before it can reach any operational system. ConnGuard NAC enforces identity-based access at every connection point — patrol vehicles, precinct networks, and field devices verified before they reach sensitive systems.
Outcome
The agency has run this at a scale of more than 350,000 endpoints. If a device is lost, stolen, or behaves abnormally, it is isolated centrally and instantly — across the entire country, from one console. S3M turned the agency's largest attack surface into its most controlled asset.
“Our responsibility is national public safety. That means hundreds of thousands of devices operating far beyond the walls of any building — vehicles, mobile data terminals, handheld units, and field equipment spread across an entire country, connecting over cellular networks we do not own. Traditional network security assumes a perimeter you can defend. We do not have one perimeter; we have 350,000 of them, and every single one is mission-critical. A security failure for us is not measured in money. It is measured in public safety. APNZone is the first platform we have seen that treats cellular connectivity as part of the Zero Trust architecture rather than an exception to it. Every field device connects through a private APN — it never touches the public internet, and it is effectively invisible to anyone outside our network. SIM-based identity is fused with network access control, so a device is authenticated and its policy is enforced before it can reach any operational system. If a device is lost, stolen, or behaves abnormally, it is isolated centrally and instantly — across the entire country, from one console. We have run this at a scale of more than 350,000 endpoints. At that scale, most products break, and most vendors disappear. APNZone did neither. For an organization where connectivity is operational capability, S3M turned our largest attack surface into our most controlled asset.”
National Law Enforcement · EMEA
Our perimeter is the entire country. APNZone made every one of our 350,000+ field devices part of a private, invisible, policy-enforced network.
S3M products in use
APNZone
Industry-first NAC + Private APN fusion
Cellular Zero Trust at national scale — private APN connectivity fused with network access control, delivering SIM-based identity, policy enforcement, and central isolation for every field device, with zero public-internet exposure.
ConnGuard NAC
Network Access Control
ConnGuard enforces identity-based access at every connection point — patrol vehicles, precinct networks, and field devices verified before they reach sensitive systems.
Zero Trust in practice
- 350,000+ field endpoints connected over a private APN — invisible to the public internet.
- SIM-based identity fused with NAC policy: authenticate first, connect second.
- Lost or compromised devices isolated instantly, nationwide, from a single console.
S3M products in use
ConnGuard NAC — Enterprise NAC Platform
ConnGuard is an enterprise NAC platform delivering identity-driven Zero Trust access control across hybrid, on-prem and cloud infrastructures.
Frequently asked questions
What did the National Law Enforcement Agency use S3M for?
The agency uses S3M's APNZone and ConnGuard NAC to connect more than 350,000 field endpoints — vehicles, mobile data terminals, handheld units, and field equipment — over a private APN, with identity-based access enforced at every connection point.
How does APNZone secure cellular field devices at national scale?
Every field device connects through a private APN, so it never touches the public internet and is effectively invisible to anyone outside the network. SIM-based identity is fused with network access control, so a device is authenticated and its policy enforced before it can reach any operational system.
What happens when a field device is lost, stolen, or behaves abnormally?
It is isolated centrally and instantly, across the entire country, from a single console.
Can S3M handle hundreds of thousands of endpoints?
The agency has run APNZone at a scale of more than 350,000 endpoints. In its words, at that scale most products break and most vendors disappear, and APNZone did neither.
Why is the agency's name not shown?
The customer story is published anonymously: the Director of IT Infrastructure at the National Law Enforcement Agency is quoted with the name withheld for security reasons.
Last updated