One option might be having two different lockdown profiles with different Filter Criteria that apply depending on the Network status. You could expose access to different applications in each of the Lockdown configurations. 

Hei Matt thanks for responding. Where can i access the Screen Shoot ?

I checked in Profile - LockDown, but i can't find the screen shoot.

You won't see the Filter Criteria options until you go to assign the Profile. If you aren't already familiar with Filter Criteria and Profile assignment options then you might want to review the help documentation / user manual first. You're probably going to want some foundational SOTI knowledge rather than diving straight in. 

i found the filter criteria.

what should i input to describe the WiFi ? I tried with WiFi name and WiFi IP, but the devices seems can't detect it.

Use Wifi SSID to Wifi.  Might need to wait for the information to be fed back to the server.  I don't know about your MobiControl server and/or build number, but you might also consider adding a data collection rule to collect SSID at more regular interval.  This may help to tune how responsive the mechanism is.   

If all the above don't work, you might need to open an official support ticket to see if there is any bug in the server/agent you are using.

You could also use a appcontrol whitelist for when the devices are connected to cellular by filter criteria,

when switching to wifi the whitelist gets exchanged for a blacklist etc..

You need to test this behaviour because i personally think the "noticing" the network change isnt that fast,

but you should be able to trim this also with server settings etc.