Primo enables the built-in firewall on targeted devices via MDM. The firewall blocks unsolicited inbound connections while allowing outbound traffic. No additional configuration is required — enabling the control is sufficient to protect devices on both macOS and Windows.