Care to elaborate? I've never seen a system that worked this way

We have a lot of Cisco switches, and most of our machines run anyconnect. The ones that don't have to have custom filters applied to them, but any time the switches see something they don't like, they bounce or shut off the port. Add to that having 20 border gateway switches and a complex checkpoint WAF, literally anything that strays from the norm breaks the network.