Take a look at your security policies to ensure that youve spelled out clearly which devices and activities are allowed. Block access to certain IP addresses, including social networking sites, is a wise move. Use smart network access control solutions to ensure non compliant devices are plugged into your network and stopped before anything can happen. Block sites and activities that don’t have anything to do with work, such as instant messaging software or proxies, are a good move to avoid grey areas in your organization’s networks.”]
Source: https://www.bankinfosecurity.com/tips-for-endpoint-warrior-a-615