That would be Windows.
For server config management there are lots of tools. FreeIPA and Ansible will do quite a bit, but when getting into stuff to manage Linux desktops fleets there isn’t a lot of endpoint management out there.
Fleet Commander is the main effort out there, and then Red Canary.
Which which one?
I use firewalld regularly. Firewalld isn’t a GUI, and it’s a wrapper around Nftables and/or iptables depending on the distribution.
I haven’t tried opensnitch.
Not having to use a Gnome extension to get desktop icons. 🙂 Although, other DEs aren’t much better.
DKMS is setup, and I still have to plan my kernel upgrades due to the compilation time.