You can fully lockdown an endpoint device to prevent all network communication from the device.

1. In the management console, on the menu bar, click Focus > Devices.
2. Click the device name.
3. In the Select Action drop-down list, click Lockdown Device.
4. If this is a Windows device, in the drop-down list, click Full lockdown.
5. Select a lockdown period.
6. Click Confirm Lockdown.