An Endpoint Protection Platform (EPP) is the prevention-focused control installed on or protecting endpoints. It combines capabilities such as anti-malware, signature and behavioral detection, application control, device control, and a host firewall to identify and block malicious code at the point of entry, before it executes. Cisco distinguishes EPP from EDR and XDR: XDR correlates telemetry and coordinates detection and response across several security domains, but it is not specifically the endpoint prevention layer described here. A Secure Web Gateway protects web traffic and applies URL, content, and malware controls at the web access layer. A CASB discovers and controls cloud-application use and data movement. Since the question asks for the control that identifies and neutralizes code attempting to execute locally, EPP is the precise match. Cisco EPP overview