You can configure device control rules to work in Offline and Online mode. Offline meaning the machine doesn`t have a connection to the domain controller. (Take into account a vpn connection still gives the user connectivity with a DC)
Is the same rule applay if client is connecting to EPO server by Agent Hendler outside the company ? If I setup blocking wifi card only in online mode and I go outside company network and I connect to wifi and client connnect to Agent Handler blocking rule turn on again ?