I am trying to find an easy way (if possible) to disable internet access on a device managed in Workspace One. These devices (Apple iOS) are not ABM enrolled at the present time. I tried altering the "Approved SIM" field on my device as a test, but that did not appear to impact internet access. I am also looing at the Network Rules profile option, but that would require manually entering each app I want to allow/disallow and (from what I can see) it does not include native apps like the native Apple email app. I am looking for a more broad-stroke option where I can disable user access to the internet but be able to re-enable it on demand. Any suggestions would be appreciated!