UTM Endpoint Protection: Require client for connectivity
On some (well, one I'm aware of) competing security platforms, if a client device attempts to connect through the perimeter security device, and does not have the vendor's endpoint security client installed, the client is either forced to install the endpoint client or it is pushed automatically -- this would help with deployment and enforcement of security for local networks.
Evan Hart commented
Great idea! I used a product 10 years ago that still has this feature.