Is there a local traffic filter program for windows with centralized management?

Question

Active Directory

Good afternoon!
We are looking for a free program that could be installed on a user's computer in a domain.
It is necessary to filter traffic on a specific interface, blocking the connection according to the given packet content.
A sort of mark-connection\mark-packet\drop based on the l7 filter.
It is highly desirable that it does not interfere with the work of a user without administrative rights, embarrassing him with his visible presence :)
Deploying a separate machine and letting traffic through it is the most extreme case, I really want to find a simpler way.