Hi, Symantec Endpoint (Now Broadcom and impossible to get - General public), allows blocking of the Kernel. You’ve stated you cannot do this as it makes the OS unstable. This is not the case.
I’ve been blocking that sucker and ALL IPV6 traffic for ten plus years. Works just fine. However, if you want to increase a security risk - keep allowing the kernel out.
Point is, we can’t lose. Just give us the option.
Many thanks.