content filter and endpoint security Multi control On MacOS

hi @eskimo

I need a safe space to work。In safe space start my work

 In safe space ,I can allow open A app, but deny open B app. I can use the C network(Such as the company intranet), but deny D network (Such as Youtube). I can read and write files inside the safe space.

Outside safe space, I can use all app, all networks I can use , but I can't read and write files in safe space.

the content filter and endpoint security unable to judge Inside or outside。Is there any other way?