SIM control policy
Last updated December 6th, 2023
This feature is only available upon request. Please contact your Knox Guard admin.
The SIM control policy allows you to configure a default group of settings that restrict SIM functionality or lock devices with unlisted SIM cards.
Each mobile device carrier has their own unique MCC and MNC pair. SIM cards that match the MCC and MNC pairs allowlisted using this policy can be used without restrictions. You can list a maximum of 50 MCC and MNC pairs.
For dual-SIM devices, restrictions only apply to the unlisted SIM card. Up to a maximum of 10 SIM control policies can be set.
To update this policy for select devices, see Enable and disable SIM control.
Set a default SIM control configuration
To set a default SIM control configuration:
-
Navigate to the Policies page.
-
Under ADVANCED CONTROLS, click SIM CONTROL.

-
Enter a Policy name.
-
Enter the MCC, MNC, and GID1 (Optional) numbers to allowlist.
-
If desired, configure your SIM control restrictions for unlisted SIM cards:
Restriction Result Make outgoing calls Restricts the device's ability to make phone calls. Receive incoming calls Restrcits the device's ability to recieve phone calls. Send or receive SMS/MMS/RCS Restricts the device's ability to send and receive text messages. Data usage Prevents apps on the device from consuming mobile data. Check the insert allowed SIM (Apply when the allowed SIM is inserted) If the device is dual-SIM and an allowed SIM card is present, allows the other SIM to use restricted features. You can select which features to allow. Apply the above restrictions when international roaming is in use Restricts the device's phone, text, and data usage when connecting to a mobile network in a country other than the device's original country of deployment. This setting applies to restricted SIMs in a dual-SIM device only. Lock device Locks the device in order to prevent the usage of unlisted SIM cards.
The available sub-settings are:
- Mobile Number Lock — Allows device users to enable or disable IMSI policies regardless of whether MCC/MNC information is provided.
- Turn on network registration verification — Validates that a blocked SIM card is not being misused by verifying that the connected network matches the allowlisted networks (via MCC/MNC).
- Block incoming calls when device is locked — You can add phone numbers that are allowed to call.
- Allow PIN Code unlock — Allows the SIM locked device to be unlocked using a PIN. For more information, see Lock and unlock devices
-
Click SAVE.
Delete SIM control policy
You can only delete a policy if it isn’t currently applied to any device.
To delete a SIM control policy:
-
Navigate to the Policies page.
-
Under ADVANCED CONTROLS, select SIM CONTROL.
-
Click the X next to the SIM control policy you want to delete.

On this page
Is this page helpful?