Abstract: A system is provided in which a network access policy is distributed from a gateway device to each one of a plurality of user terminals forming a logical device family for enforcement. The gateway device is configured as a router between the Internet and a private local area network. Each one of the plurality of user terminals is capable of connecting to either the private local area network or a cellular data network to access the Internet. The gateway device is configured to distribute the network access policy to each one of the plurality of user terminals, and the network access policy has user-defined parameters specifying terms of access to the Internet. The plurality of user terminals are configured to abide by the network access policy whether they are connected to the private local area network or to the cellular data network.