Hi everyone, we manage a few sensitive applications such as our internal CRM and finance tools through Hexnode. The leadership team wants to ensure these apps can only be accessed from the office and only during working hours.
For example, if someone tries to open the CRM from home or late at night, the app should not be accessible on the managed device.
Is there a way in Hexnode to enforce something before allowing access to these apps?
10 Views
@benjay , yes, this can be implemented in Hexnode by combining Geofencing, App restriction policies, and Automations. The idea is to enforce a restriction policy whenever the device is outside the office location or outside the approved operational hours.
First, create a geofence that represents the physical office location.
Navigate to Admin → Geofencing.
Select Create Fence.
Mark your office location on the map.
Configure a radius (for example 200 meters) to account for GPS drift.
Save the fence with a clear name such as Main Office.
This allows Hexnode to determine whether a device is inside or outside the approved location.
Next, create a policy that blocks the applications you want to restrict.
Go to Policies → New Policy.
Select the required platform.
Navigate to App Management → Blocklist / Allowlist.
Add the sensitive apps (for example CRM or finance tools) to the Blocklist.
Save the policy (example name: After-Hours App Lockdown).
This policy will be applied when the device violates either the location condition or the time condition.
Create a time-based automation that associates the lockdown policy after work hours.
Navigate to Automate → New Automation.
Choose Action → Associate Policy.
Select the Lockdown policy.
Under Trigger, choose Time.
Configure the schedule:
Days: Monday–Friday
Time: for example 18:00
Select the target device groups.
This ensures the restriction policy activates outside your operational window.
Create a second automation based on location activity.
Go to Automate → New Automation.
Choose Action → Associate Policy.
Select the same lockdown policy.
Under Trigger, choose Activity.
Configure Initiate → On Location Non-Compliance.
Add the required device groups.
Now, if the device leaves the geofence, the restriction policy is applied automatically.
Don't have an account? Sign up
