yes, as any competent classic old fart network-wide IPS/IDS

endpoint security is a great utopia to strive for, but to get there we ought to starts with having secure by default endpoints.