Setting this object to enabled restricts a port so it can only communicate with the switch's CPU management port and with other ports that don't also have isolation enabled. An administrator enables this on ports serving mutually-untrusting devices, like separate tenants sharing a switch, so they can't see each other's traffic even though they're on the same VLAN. For example, enabling zyPortIsolationPortState on ports serving two different guest devices in a shared office prevents those devices from directly communicating with each other.