EndPoint Isolation should be a feature in the ePO for ENS. I think that is an option already for Mvision. This needs to be added to ENS. Crowdstrike already have this feature. This needs to be addressed
MAR does this, which is really an additional ENS module. However, you can build a simple firewall policy to do this. Restrict communication to only your ePO server, and setup a policy assignment rule. Tag, do a wake up and then the system is issolated.