Your company is deploying Azure Firewall to protect a hub virtual network. Security requirements state that all outbound TLS traffic from application servers must be decrypted and inspected for malware, and the firewall must use a signature-based intrusion detection and prevention system (IDPS) that can block known malicious network patterns. The solution should minimize cost while meeting these requirements. Which Azure Firewall SKU should you deploy?