Category Filter

Geofencing – Location based MDM restriction

Geofencing is a location-based service that lets you create a virtual fence around a geographical region. By creating geofences, administrators can restrict the availability of corporate resources on mobile devices as it enters or exits the virtual boundary. Hexnode UEM lets you define security policies based on the virtual perimeter created as a geofence, thereby preventing unauthorized people from accessing your corporate data.

Creating a fence

To create a fence,

  1. Login to your Hexode MDM portal.
  2. Go to Admin > Geofencing.
  3. Click on Create Fence.
  4. Select a region by typing the location in the text box.
  5. Draw a rectangular fence over the region.
  6. Click Save.

Applying the Geofence policy

To enforce a configuration or restriction payload along with a geofence policy,

  1. Login to your Hexnode MDM portal.
  2. Navigate to Policies tab.
  3. Click on New Policy to create a new one or click on any policy name to edit an existing one. Enter the Policy Name and Description in the provided fields.
  4. Navigate to General Settings > Select Geofencing.
  5. Click on + Add Fence > Select the fence(s) you want from the list > Click OK.
  6. Set up the required configurations or restrictions payload such as Passcode, Wi-Fi, Email settings that you want to associate to the devices only when they are inside the selected geofenced regions.
  7. Head on to Policy Targets > + Add Devices > Select the required device(s) > Click OK.
  8. Click Save.

Dynamic grouping with Geofencing

Dynamic groups automatically keep changing their member devices based on certain specified conditions. In dynamic grouping, devices move in and out of the group during the periodic group sync. Any device satisfying the conditions of a dynamic group at a time gets added to the group, and all the policies applied to the group takes effect automatically on every device in that group.

To create a Dynamic Device Group,

  1. Login to your Hexnode MDM portal.
  2. Navigate to Manage tab > Device Groups > New Dynamic Group.
  3. Enter the Group Name and Description.
  4. Under Choose Geofences/Location Filters, choose one or more locations while selecting either Include or Exclude to group devices to a specific region.
  5. You can add a criterion by specifying the constraints in Choose Condition filters.
  6. There can be exceptions to rules. You can include all the exceptional conditions under Add Exceptions. The devices satisfying these conditions will be exempted from dynamic grouping.
  7. Click on the Preview button to view the list of devices that matches the criteria.
  8. Click Save group to save the group details.

  • The Include option enables you to apply any policy to a group of devices present in the selected region(s).
  • The Exclude option enables you to enforce any policy to a group of devices excluding the ones present in the selected region(s).
  • More condition filters and exceptions can be added/deleted by clicking on + or respectively.
  • The vertical ellipsis icon helps you add two or more possibilities with AND/OR clauses. When you specify clauses, the device gets filtered for dynamic grouping based on conditions specified along with it. OR indicates that either of the alternatives needs to be fulfilled. Whereas AND necessitates that all the mentioned conditions should be met.

What happens when a device moves out of the specified fence or enters a restricted area?

When a device comes out of its specified fence or enters a restricted area, the device will be marked as non-compliant on the MDM console. You can configure Notifications settings so that the administrators, as well as the associated users, get notified via email upon the device non-compliance.

To enable notifications via email,

  1. Login to your Hexnode MDM portal.
  2. Go to Admin tab > Notifications.
  3. Under Notify the administrators on, check the option Device out of Compliance.
  4. You can also notify the users when a device goes out of compliance.
    Under Notify the associated users on, check the option Device out of Compliance.
  5. Click Save.