An enterprise network comprising: at least one wireless access point operative to enable a wireless device to connect to said enterprise network; networked resources operative to be accessed by said wireless device; and a network selection server, implemented on at least one computing device, and operative to: authenticate (430, 440) credentials provided by said wireless device when connecting to said enterprise network via said at least one wireless access point, upon the authentication (430, 440), determine whether a network selection client application is present on said wireless device, and upon determining that said network selection client application is not present on said wireless device, push an installable version of said network selection client application to said wireless device, the network selection client application comprising a device profile, the device profile specifying network access selection policies to said wireless device, wherein said network access selection policies at least determine access by said wireless device to said networked resources while said wireless device is connected to said enterprise network, wherein said network selection server is further operative to: determine whether said network selection client application has an up-to-date network access selection policy for said wireless device to access said networked resources; upon determining that said network access selection policy is not up-to-date, push an updated version of said network access selection policy to said wireless device; monitor network access behavior by the wireless device; and adjust the network access selection policies for the wireless device based on analysis of the monitored network access behavior. at least one wireless access point operative to enable a wireless device to connect to said enterprise network; networked resources operative to be accessed by said wireless device; and a network selection server, implemented on at least one computing device, and operative to: authenticate (430, 440) credentials provided by said wireless device when connecting to said enterprise network via said at least one wireless access point, upon the authentication (430, 440), determine whether a network selection client application is present on said wireless device, and upon determining that said network selection client application is not present on said wireless device, push an installable version of said network selection client application to said wireless device, the network selection client application comprising a device profile, the device profile specifying network access selection policies to said wireless device, wherein said network access selection policies at least determine access by said wireless device to said networked resources while said wireless device is connected to said enterprise network, authenticate (430, 440) credentials provided by said wireless device when connecting to said enterprise network via said at least one wireless access point, upon the authentication (430, 440), determine whether a network selection client application is present on said wireless device, and upon determining that said network selection client application is not present on said wireless device, push an installable version of said network selection client application to said wireless device, the network selection client application comprising a device profile, the device profile specifying network access selection policies to said wireless device, wherein said network access selection policies at least determine access by said wireless device to said networked resources while said wireless device is connected to said enterprise network, determine whether said network selection client application has an up-to-date network access selection policy for said wireless device to access said networked resources; upon determining that said network access selection policy is not up-to-date, push an updated version of said network access selection policy to said wireless device; monitor network access behavior by the wireless device; and adjust the network access selection policies for the wireless device based on analysis of the monitored network access behavior.