It's a feature of EDR products, it lets IT isolate a device from the network to stop malware hitting other devices on the network. If you so wanted you could b

It's a feature of EDR products, it lets IT isolate a device from the network to stop malware hitting other devices on the network. If you so wanted you could build a firewall that blocked all Linux devices based on something like Nmap's OS detection.