WithSecure Elements EPP for Mobiles (Without VPN) Partner Managed

What is included in WithSecure Elements EPP for Mobiles (Without VPN) Partner Managed?

Browsing Protection – Blocks phishing and malicious sites through WithSecure Security Cloud reputation checks.
SMS Protection – Moves messages with unsafe links or malicious QR codes to junk.
Android anti-malware – Scans installed apps and files on Android, including ransomware detection.
Safari extension for iOS – Checks full URLs in Mobile Safari, even alongside a company VPN.
Remote device actions – Send messages, trigger scans and collect diagnostics from the console.
Important – No encrypting VPN, no MDM device policies and no EDR component.

What are the main benefits of WithSecure Elements EPP for Mobiles (Without VPN) Partner Managed?

WithSecure Elements EPP for Mobiles is the mobile threat protection module of the WithSecure Elements platform for iOS, iPadOS, Android and ChromeOS, and was sold as F-Secure Elements EPP for Mobiles before F-Secure's business security division became WithSecure. In the Partner Managed variant, the subscription sits in your WithSecure partner's Elements Security Center account, and the partner configures protection profiles and monitors your devices for you.

Less internal admin work – Your partner handles enrolment, protection profiles and alert follow-up centrally.
Coverage beyond one browser – Network Gateway checks visited URLs across apps, not only the browser.
Category-based web filtering – Profiles can block site categories such as adult content or gambling.
Fits your existing MDM – Deploys via Intune, Workspace ONE, Knox, Miradore or Google Workspace.
Rollout without device handover – Employees install the app themselves from a personal email invitation.
Switchable management model – Can be changed to Company Managed later through your reseller.

Which company size is WithSecure Elements EPP for Mobiles (Without VPN) Partner Managed suitable for?

The Partner Managed variant is built for companies that have no internal security administrator and already let an IT service provider run their WithSecure Elements environment. Small and medium-sized companies get mobile phishing and SMS protection without having to learn a console. Large organisations usually operate their own mobile device management and need this product as an add-on layer rather than as their main mobile tool.

Does WithSecure Elements EPP for Mobiles (Without VPN) Partner Managed meet the requirements of Swiss cybersecurity legislation?

Under the revised Information Security Act, operators of critical infrastructure in Switzerland, such as energy suppliers, hospitals, transport companies and public authorities, must report cyberattacks to the Federal Office for Cybersecurity (BACS) within 24 hours of discovery. WithSecure Elements EPP for Mobiles supports this obligation indirectly: blocked phishing sites, malicious URLs and threats on company smartphones appear as events in Elements Security Center, so your partner can confirm when and on which device an attack attempt occurred. The product does not create or submit a report to BACS, does not record forensic telemetry on mobile devices and does not detect compromised user accounts. Companies outside the critical infrastructure sectors are not subject to the reporting obligation, but can use the same event records for internal incident documentation. This information does not constitute legal advice; please have your specific obligations assessed by a qualified specialist.

Does WithSecure Elements EPP for Mobiles (Without VPN) Partner Managed meet the requirements of European cybersecurity legislation?

No software product makes a company compliant with the NIS 2 Directive, because the directive requires organisational risk management measures, not a specific tool. The measure categories include incident handling, business continuity, supply chain security, vulnerability handling, basic cyber hygiene and training, cryptography and encryption, access control and multi-factor authentication. WithSecure Elements EPP for Mobiles contributes to cyber hygiene by blocking phishing sites and malicious SMS on smartphones, and to incident handling by making mobile threat events visible in a central console. It does not cover encryption of devices or connections, multi-factor authentication, backup, vulnerability management for mobile operating systems or enforcement of device policies. These gaps must be closed with an MDM solution, identity controls and documented processes.

Does WithSecure Elements EPP for Mobiles (Without VPN) Partner Managed help with security questionnaires from large customers?

Partly: it answers the questionnaire items on mobile threat protection, but not those on mobile device control. You can confirm that company smartphones are protected against phishing websites and malicious SMS, that Android devices are scanned for malware, that protection is centrally managed by a named service provider, and that protection status is visible per device. You cannot use it to answer questions on enforced device encryption, minimum operating system versions, remote wipe, multi-factor authentication, encrypted connections on public Wi-Fi or detection and response on mobile devices, because WithSecure leaves device policies to an MDM solution. The most practical route is to combine this product with an MDM platform your company already licenses, such as Microsoft Intune, which WithSecure supports directly. For workstation and server items in the same questionnaire, WithSecure Elements Endpoint Protection and Endpoint Detection and Response modules can be added and run by the same partner in the same console, which is usually simpler than introducing a second vendor.

Which limitations should you know before buying?

WithSecure states that the Network Gateway, which filters traffic across all apps, is available only in selected countries, so Swiss and European buyers should have their partner confirm availability before ordering. This matters most on Android: Chrome on Android does not support browser extensions, so without the Network Gateway, Android devices have no browsing protection. On iOS, anti-malware scanning is not offered, and the Network Gateway cannot run while another full device VPN is active, a restriction set by Apple; in that case only Mobile Safari is protected through the extension. The phrase Without VPN refers to the full-network mobile VPN, which WithSecure discontinued for all Elements Mobile Protection customers in April 2024, so neither variant encrypts traffic on public Wi-Fi or offers virtual locations. The product is also not an MDM solution, which is the gap that most often leads to a follow-up purchase.

What a VPN protects against, and what it does not
Explains which risks an encrypting VPN actually reduces and which common assumptions about VPN protection are wrong.

Frequently asked questions about WithSecure Elements EPP for Mobiles (Without VPN) Partner Managed

Do we get our own login to the management console?

Not automatically. Partner Managed subscriptions are provisioned under the partner's WithSecure business account, and your company only gets console access if the partner creates an administrator account for you.

What happens to our settings if we switch to Company Managed?

Protection profiles created at partner level are no longer available after the switch. WithSecure recommends cloning those profiles into your own organisation before requesting the change through your reseller.

Do employees have to confirm anything on iOS devices?

With the email invitation, users install the app and approve the local VPN profile it needs for filtering. If the app is deployed through an MDM that is preconfigured with WithSecure's configuration keys, these user approvals are not required.