We want to prevent excessive or unauthorized mobile data usage during international travel for our iOS devices. Ideally, we’d like a setup where devices connected to a mobile network outside the approved home country are detected, and mobile data is blocked or restricted to business apps only. Is this possible with Hexnode?
22 Views
Replies (3)
Marked SolutionPending Review
Participant
13 hours ago
Mar 06, 2026
Marked SolutionPending Review
That sounds like a smart way to control roaming costs. I’m wondering if dynamic groups could help here by flagging devices based on network location.
Marked SolutionPending Review
Hexnode Expert
12 hours ago
Mar 06, 2026
Marked SolutionPending Review
Thankyou for raising this question.
In Hexnode UEM, this can be implemented by combining Geofencing, Dynamic Device Groups, and by automating remote actions.
Here’s how you can do it:
Step 1: Create a geofence for the Home country
First, define the geographic area where devices are expected to operate normally.
Steps
-
Sign in to the Hexnode UEM portal.
-
Navigate to Admin → Geofencing.
-
Click Create Fence.
-
Enter a Fence Name.
-
Use the map to draw the boundary covering the approved region.
-
Configure the required radius or polygon boundary.
-
Click Save.
This geofence will represent the region where devices are expected to operate without restrictions.
Step 2: Create the Dynamic Group
-
Manage → Device Groups → New Dynamic Group
-
Name it International.
-
Use the Exclude option in the corner.
-
Add a Conditional Filter:
-
Device Info → Platform = iOS
Step 3: Create a Compliance Policy with Geofence
-
In the Hexnode portal, go to Policies → Compliance Policy.
-
Click Add New Policy.
-
Under Basic Settings, select the option Device moves out of geofence.
-
Save the compliance policy and assign it to the dynamic group.
Step 3: Create Automation
-
Go to Automation → New Automation.
-
Choose Platform = iOS.
-
Configure the actions:
-
Disable Data Roaming → prevents mobile data usage while roaming.
-
Disable Personal Hotspot → blocks tethering/sharing data.
-
Define the trigger as Activity.
-
Set the initiation condition to On Location Non-Compliance.
-
Associate the automation with the above created dynamic group.
Now, whenever your iOS device is detected outside the approved geofence, the automation will trigger and enforce the restrictions automatically.
Regards,
Mary Romero
Marked SolutionPending Review
Participant
8 hours ago
Mar 06, 2026
Marked SolutionPending Review
That’s kinda the automation we need for international travel.
Save
