- 1. Estimated network availability; formal SLA available in Enterprise plans.
- 2. Aggregated multi-carrier access; automatic failover to the best available operator.
- 3. Aggregated roaming coverage; exact list varies by country and operator.
Key features
Multi-carrier redundancy
Automatic failover across 750+ 2G/4G/5G networks if the primary operator drops. Alarms keep reporting even when one carrier is down.
Static IP for monitoring stations
Optional fixed IP per SIM for direct integration with Alarm Receiving Centers (ARC) — no NAT, no intermediate forwarding.
Dedicated private APN
Security traffic isolated from the public internet via private APN and site-to-site VPN. Ideal for compliance-driven environments.
LTE-M and NB-IoT
Low-power sensor support over LTE-M and NB-IoT. Long battery life for stand-alone detectors and panic devices.
Real-time alerts
SLA-backed low latency so intrusion, tamper and panic signals reach the ARC in seconds.
Heartbeat and supervision
Continuous SIM state monitoring (last seen, signal strength, data sent) from the portal and the REST API.
Use cases
Typical problems
- Customer drops the wired backup line — the panel has only one path, and if the mobile carrier drops, the ARC loses signal.
- Burglars use GSM jammers in specific neighborhoods — single-band panels are knocked out.
- Supervision heartbeats lost when the SIM camps on a network with voice but no data — the panel thinks it's online but no alarms transmit.
- Expired or accidentally deactivated SIMs leaving panels blind for weeks.
- Battery-powered sensors that consume more data than expected and drain in months instead of years.
- Panel IP communicator rejected by the ARC because the IP changes on every reboot (operator CGNAT).
Recommended architecture
- 1
Alarm panel with multi-band + multi-operator cellular communicator
Supports 4G/LTE-M with fallback to 3G and 2G. eUICC SIM lets you switch operator OTA if the primary network at the site is unstable, without dispatching a tech to swap cards.
- 2
Static public IP SIM for direct ARC integration
The ARC sees each panel with a stable IP. No CGNAT, no intermediate NAT. If the panel sends SIA-IP or Contact ID over TCP, the ARC associates it with a specific customer instantly.
- 3
Private APN dedicated to the security sector
Traffic never touches the public Internet. IPsec or WireGuard tunnel to the ARC rack. Meets EN 50136 and the segmentation requirements of insurers.
- 4
1-5 min heartbeat + portal loss alarm
The panel sends a frequent heartbeat. If connectivity drops for more than 5-10 minutes, the portal raises an automatic alarm to the ARC. The SIM itself is also supervisable independently of panel state — if the SIM is offline but was on 30 seconds ago, that's tampering.
Indicative data plan
| Device | Typical monthly traffic | Recommended plan |
|---|---|---|
| Residential panel with IP communicator (heartbeats + events) | 5-15 MB/month | Alarm 25 MB plan |
| Commercial multi-zone panel (more events) | 20-50 MB/month | 100 MB plan |
| LTE-M battery-powered detector (hourly heartbeat) | 0.5-2 MB/month | Smart-meter 5 MB plan |
| Video-verification camera (event clip) | 100-500 MB/month | 500 MB plan / Pooled data |
Indicative figures. Tampering events or repeated false positives can multiply consumption. Configure block alarm at 2x the pilot-measured usage.
When to use static IP
- The ARC accepts only connections from per-customer allowlisted IPs — SIA-IP / Contact ID over TCP.
- The panel is managed remotely from the installer's app (configuration, firmware updates, zone programming).
- Regulatory audit (UNE-EN 50136) requires per-signal traceability to an identified source IP.
When to use private APN
- Compliance with UNE-EN 50136 grade 3-4 with communication paths segmented from the public Internet.
- Customer is critical infrastructure (bank, energy, telecom) and demands end-to-end private network.
- DDoS protection for the ARC — the private APN is unreachable from the Internet.
Compatible devices
Honeywell Vista / Galaxy with IP module
Residential and commercial panels with cellular communicator add-on. Support SIA-IP and Contact ID. Standard among Spanish installers.
Risco LightSYS, ProSYS Plus
Modular panels with integrated or slot-based GSM/LTE module. Installer app for remote config.
DSC PowerSeries Neo / NEO HS2
Panels with TL280R / 3G/4G LTE communicators. AES 256 encryption to the ARC.
Paradox MG / SP / EVO
Panels with PCS-250 / PCS-265 communicators that add a SIM slot. Support dual reporting (IP + GPRS).
LTE-M standalone detectors
Motion, opening, smoke or CO sensors with LTE-M and 5-10 year batteries. Report point events without needing a central panel.
Portable SOS / panic buttons
For seniors, lone workers, retail at risk of robbery. Static IP recommended so the ARC identifies the device unambiguously.
Frequently asked questions
- What happens if an attacker uses a GSM jammer near the panel?
- If the panel only supports one band (typical GSM 900), it's neutralized. Solution: multi-band panels with LTE (which uses different bands) and ideally NB-IoT as backup. A multi-operator SIM doesn't solve jamming — you need different radio technologies.
- Is it legal to replace the wired line with cellular-only in residential alarms?
- In Spain yes, if the system meets UNE-EN 50131 grade 2 or above and the cellular path is supervised (heartbeat). The installer must document the system grade and hand the customer the certificate. Major insurers usually require grade 3 with two independent communication paths.
- Will the ARC receive the signal if the panel is behind operator CGNAT?
- Only if the panel initiates the connection (client mode) toward the ARC and keeps the tunnel open, which uses data. To avoid this, get static public IP — the ARC can initiate connections TO the panel for remote diagnostics, and event latency is lower.
- Is LTE-M for standalone detectors worth it?
- Yes, especially for outdoor sensors, perimeter beacons, flood detectors, etc. Battery lasts 5-10 years with NB-IoT/LTE-M vs. months with classic 3G/4G. NB-IoT indoor/underground coverage is markedly better. Only caveat: verify LTE-M coverage at the site — not all of Spain has it yet.
- What if the SIM camps on a voice-only network with no data?
- The panel thinks it's online (green LED) but doesn't reach the ARC. Solution: heartbeat every 1-5 min with strict ARC timeout. If 2 consecutive heartbeats fail, raise loss-of-communication alarm. Multi-IMSI SIMs also prioritize networks with data available.
Pre-deployment checklist
- 1Panel inventory: model, communication module, supported cellular band (3G/4G/LTE-M), SIM format (2FF/3FF).
- 2Static vs CGNAT-dynamic IP decision — documented per panel.
- 3Public APN with encryption vs sector-dedicated private APN decision.
- 4Heartbeat frequency per required UNE-EN 50136 grade (every 5 min for grade 3, every 30 s for grade 4).
- 5Per-panel data plan with 100% headroom over measured consumption and auto-block at 2x nominal.
- 6Cellular path encryption (AES 128/256) and end-to-end verification with the ARC.
- 7SIM replacement procedure for compromised panels — eUICC OTA or physical swap?
- 8Customer documentation with system grade and installer certificate.
- 9ARC coordination: protocol (SIA-IP, Contact ID, proprietary), event format, heartbeat windows.
- 10Pilot of 10-20 panels for 2 months verifying real uptime and event delivery time to the ARC.
Need a printable version? See the pre-deployment guide.
Have a project in mind?
Tell us your use case and we'll help you find the best connectivity solution.