On 27/10/2012 10:21, Paul Gear wrote: > So what do you do for the scenario where you're providing service for > BYOD or public networks (as the OP seemed to be) and have no authority > to touch the end user's device? Nothing. If there *was* something you could do, the whole model would be broken. Feature, not a bug.