Abstract: Traffic is received at a distributed cloud computing network. The traffic originates from a computing device using a mobile data connection. The traffic is associated with an identifier that identifies a SIM of the computing device. Using the SIM identifier, an identity for identity-based policy enforcement at the distributed cloud computing network is determined. The identity is uniquely associated with the SIM identifier. An identity-based policy that is applicable for the received traffic for the determined identity is determined. The identity-based policy is enforced.

Abstract: A method is provided which includes receiving location information, performing a selection operation to select an International Mobile Subscriber Identity (IMSI) for obtaining temporary bootstrap connectivity, and attempting to register with a network using the selected IMSI. The selection operation is configured to select one of a first plurality of IMSIs in a first location and one of a second, different, plurality of IMSIs in a second location. Each of the first plurality of IMSIs includes a first predetermined value for at least the first portion of each respective IMSI and each of the second plurality of IMSIs includes a second, different, predetermined value for at least the first potion of each respective IMSI. The selection operation comprises a first and second preconfigured selection characteristic. A network access element, host device, and network node, according to the method, are also described.