Requirement: Mobile endpoint devices can access the Internet only through trusted wireless APs. The configuration procedure is as follows:

Step 1.Navigate to Endpoint Mgt > Connection Control > Mobile Endpoints, as shown in the following figure.

Step 2.Go to Excluded Users tab to add users, user groups, or IP addresses that can access mobile endpoints as excluded users. See the picture below: