Symantec Endpoint Protection Mobile provides active location based protection for each device. Some organizations may need this setting disabled per contractual requirements or on a case by case basis. Turning off this setting impacts the service as the device will no longer identify suspicious networks without enabling location based services. This is applicable to both Android and iOS devices. This setting is a Global Policy for all devices connected to the MDM.
Organizations which require Location Based Services to be disabled can configure this setting in the Symantec Endpoint Protection Mobile - Mobile Device Management Console.
While the disabling of 'Location Based Services' is not recommended and impacts the active scanning of suspicious networks, Symantec understands the necessity in limiting the tracking of employees through 'Location Based Services.'
The Location Setting can be changed to one of three options: Mandatory (Recommended), Optional (Allow Users to enable/disable setting), and Never ask for permission.
Mandatory - Requires all devices to have 'Location Based Services' enabled
Optional - Allows the Organization to have multiple devices with 'Location Based Services' enabled or disabled depending on organization preference
Never ask for permission - Requires the setting in the "PERSONAL DATA" section titled "Security Incident Location" be unchecked. This selection will remove the "Suspicious Networks near you" from the Symantec Endpoint Protection Mobile home screen as show below
8. The 'Optional' setting will allow 'Location Based Services' to disabled on both Android and iOS devices. On the end device, 'Suspicious Networks' will appear in gray and when pressed will show the map page which display the message "Tap to enable Location Services."
9. Once finished click the 'Apply Changes' button which appears at the top of the console screen. The changes will be effective and sent to the end device at that time.