Device Geofencing and Curfews

Decide where and when devices can be trusted

Define go and no-go zones for company devices and set off-grid time limits. When a device crosses a boundary or stays dark too long, Tether can notify your team or trigger a Device Containment action automatically.

Zones

with entry and exit rules

Curfews

limits on time off the grid

Automatic

enforcement, online or not

The problem

When device location becomes a security or contractual issue

Your organization sets rules for where employees can work. Your customers restrict where their data can be. Governments and industries restrict where devices can travel. And employees relocate without telling anyone. Rules like these are routinely broken without anyone noticing.

Silent Failure

Drift produces no alert

A device that travels outside its approved region keeps checking in normally. Nothing in a standard fleet view distinguishes it from a device sitting at a desk.

Delayed Response

Discovery happens after the fact

By the time anyone reviews location history, the window to act has usually closed. The device is gone, the data has been accessed, or the reporting deadline has passed.

Offline gap

Dark devices are beyond reach

A device that stops checking in can't be told to do anything. Whether it's offline by accident or by design, it needs to be tracked down or disabled, and a remote command can't reach it. Tether enforces the rule on the device itself.

The solution

Real-time detection, automatic action

A geofence breach or an expired curfew is a trigger, not just a log entry. Tether runs the action you preconfigured: notify your team, lock the device, or contain the data. No analyst has to step in, and curfews fire on the device without a network connection.

Geofences

Zones with entry and exit conditions

Draw the areas a group of devices is expected to operate in — a campus, a metro, a country, an operating region — and state what should happen on entry or exit.The console reports which devices are inside each zone right now, so the policy doubles as an inventory of where your fleet actually is.

Attach zones to device groups, not individual machines
Choose notify or lockout per zone and per direction
Historical record of every entry and exit for review
Offline Curfew™

A limit on how long a device may stay dark

A device that stops reporting is the hardest case: you cannot see it, and you cannot send it a command. A curfew turns that silence into the trigger.

The rule is evaluated on the endpoint, so keeping a device offline to avoid a response is what causes the response to fire.

Set max offline days or specific due date
Lockout executes locally with no network connection
Clears automatically when the device checks back in
In Practice

The rules teams write first

Every fleet has a handful of movements that are never legitimate. These are the ones customers turn on in the first week.

Monitor significant drift
A laptop issued for one region ends up working from another. No automatic action needed, but log the movement and alert the team.
zone exit
Desktops shouldn't move
Desk-bound hardware has one address for its whole service life. Any change of location is worth a response, not a review.
ASSIGNED FACILITY
Some countries are off limits
Sanctions and embargo rules don't bend for a contractor who traveled. The device has to stop working there, not be asked about afterwards.
COUNTRY DENY LIST
Devices go dark
A machine kept offline is the one case where a console can't help you. The curfew runs on the endpoint and fires without a network.
OFFLINE CURFEW
Loaners should come back
Temporary hardware goes out with a return date. When it passes and the device is still off site, the rule handles it.
RETURN WINDOW
faq

Device Geofencing and Curfews FAQ

Still have questions? Talk to us →
Does a curfew lockout need the device to be online?
+

No. The curfew threshold is evaluated on the device. If the agent has been unable to check in for longer than your limit, the configured RemoteKill action executes locally, with or without a network connection.

What stops a false positive from locking out a travelling employee?
+

Rules are set per group, and each rule chooses its own response. Most teams start with notify-only on exit conditions, keep lockouts for embargoed countries and curfew expiry, and grant travel exceptions ahead of time.

Can someone defeat a geofence with a VPN?
+

That attempt is itself a signal. Tether compares reported position against network egress country and connection reputation, so a mismatch raises an alert rather than passing silently as a valid location.

Do we have to use lockouts to get value from this?
+

No. Zones and country policy are useful as reporting alone — they tell you where your fleet actually operates, which is often the first time that question has a documented answer.

How does geofencing improve device security?
+

Geofencing turns location into a security policy. When a laptop leaves its approved zone, connects from a denied country or hides behind a VPN, Tether can alert your team or contain the device automatically, before data is exposed.

What are the downsides of geofencing?
+

Geofences alone can be spoofed with a VPN or defeated by keeping a device offline. Tether adds network-egress checks and Offline Curfew to close both gaps.

Do geofences work on laptops without GPS?
+

Yes. Tether combines Wi-Fi, GPS, cellular and IP location, so geofences work indoors and on hardware without a GPS radio.

Get started

Stand up a proof-of-concept within minutes, or book a demo with one of our IT experts.

No credit card to start · No obligation
Try for free

Your 30-day free trial is fully functional and converts to a full production account upon purchase - nothing to uninstall or reinstall from the trial. We verify each request before opening an account.

Thank you!

Your request has been received. We'll get back to you today.

Oops! Something went wrong while submitting the form.
Book a demo

Ask anything about how the Device Trust Platform works.

Thank you!

Your request has been received. We'll get back to you today.

Oops! Something went wrong while submitting the form.
Talk to us

Ask anything about how the Device Trust Platform works.

Thank you!

Your request has been received. We'll get back to you today.

Oops! Something went wrong while submitting the form.