Trend Micro Mobile Network Security
Hybrid cybersecurity for enterprise private mobile networks

Advancements in connectivity bring new possibilities. It is essential to prepare for cyber threats that stem from utilizing connected mission-critical applications in a borderless internet of things (IoT) network environment.

Joint-defense Between Network and Endpoint

As a comprehensive solution, TMMNS offers two-layers of protection for your private mobile network:

• TMMNS Network Protection Identifies and blocks vulnerability exploitation, malicious content, and suspicious network behaviors at the data network of a mobile network core, protecting your private mobile network at the network level
• TMMNS Endpoint Protection Provides cellular UE visibility, identifies illegitimate cellular UE, and denies a cellular UE access to its radio access network, protecting your private mobile network at the endpoint level

TMMNS Network Protection and TMMNS Endpoint Protection provide multi-layered protections by performing their functions in individually while simultaneously working together to provide a join defense against cyber threats.

Benefits

Meet end-to-end security in mission-critical private mobile networks

• Ensures that your mobile UE, IoT endpoint devices, and application servers on your MEC system are well protected
• Prevents misused or illegitimate UEs from attacking your IT or OT networks
• Offers you an additional security protection layer across CT/endpoint and IT/network
• Blocks risky cellular UE access to its radio access network, ensuring your private mobile data network is clean

Reduce security management workload of IT sec admin in enterprise ICT

• Purpose-built for seamless CT and IT integration without third-party systems; security policy management is based on IMEI/IMSI rather than on IP address
• Visibility of risk status for each cellular UE
• Simple yet efficient security management in one console

Cost efficiency for deployment in mission-critical private mobile networks

• No third-party systems needed for CT and IT integration, making deployment cost-efficient
• Agentless and no firmware integration required for each cellular UE

Endpoint protection

If an unauthorized device attempts to access the radio access network, TMMNS Endpoint Protection will identify the anomaly behavior and deny access.

Delivered by secure Java applet software, TMMNS Endpoint Protection is deployable on any subscriber identity module (SIM) – physical SIMs, eSIMs, and iSIMs – allowing you to harden mobile UE/IoT endpoint device security in a mobile network environment.

Identity binding continuously monitors and allows access only to registered combinations of UEs and SIMs, adding another layer of zero trust security against attackers who use stolen cards or employees who install corporate cards on risky devices.

Network protection

TMMNS Network Protection identifies vulnerabilities, malicious content, and suspicious network behaviors, blocking them in the wire to protect cellular UE/IoT endpoint devices. Complete identity information of the risky UE is logged for investigation.

• Protects app servers on MEC
• Prevents outbreak attacks from compromised UEs to connected network segments
• Stops compromised UEs from accessing C2 servers
• Shields vulnerable UEs from exploitation
• Prevents malicious UEs from attacking other devices
• Blocks flooding and port scan attacks
• Delivers application identification and URL filtering and control at the UEs

One-stop joint defense between the endpoint and the network

The powerful TMMNS Network Protection and TMMNS Endpoint Protection work together to deliver a TMMNS joint defense, facilitating security operations between CT and IT technology. You have an additional security protection layer across CT/endpoint and IT/network, ensuring a safe mobile data network.

• No third-party system required
• No need to integrate with mobile network components
• Easy and fast deployment
• Reduced security management workload
• Quarantines malicious UEs and blocks risky UE's access to its mobile core data network
• Automatically pauses/stops risky UE’s radio network access by user-defined policies