An IT company experienced malicious content spreading between user endpoints, affecting business-critical resources. The company wants to implement a solution that controls communication between individual endpoints on the network. Which approach accomplishes this goal?