Port scan detection internal network

Hi, Is there any option to detect internal network port scans from within the network or networks? Like for example using nmap or netcat or others from inside the local network, not from a wan source...
Sophos Endpoint causing network to disconnect when transitioning from wired / wireless

Sophos Endpoint running reliably in our environment for 5-ish years. There is a message / cache server on-prem that supports our clients, and we've had no major issues. All Dell Latitude / OptiPlex equipment...