It's a good idea for a network security pro to know how to validate which endpoints are establishing connections to key enterprise systems, and passive fingerprinting is a great way to find out.

P0f is a free collection of passive OS fingerprinting tools