As for most security cases, the best security is at the network level. Endpoint protection can protect after detection, while a good firewall will burn anything that moves in the wrong way.