1. A non-transitory machine readable medium storing a program for processing mobile-device data messages entering a network, the program comprising sets of instructions for: receiving a data message sent by a remote device through a first tunnel that connects the remote device to the network; removing a first tunnel header of the first tunnel from the data message; identifying a set of remote device management (RDM) attributes associated with the received data message; based on the RDM attribute set, identifying a service tag to associate with the received data message; encapsulating the data message with a second tunnel header of a second tunnel to forward the data message along the second tunnel to a network element within the network; and inserting the identified service tag in the second tunnel header of the second tunnel, said service tag for allowing a set of network elements of the network to process the data message according to a set of policies of the network.