Your company runs a public-facing web application behind a Standard public Load Balancer. The security team has purchased a third-party firewall NVA appliance and requires that all inbound and outbound traffic to the application be inspected transparently, without changing the application's public IP address or reconfiguring the existing frontend. The NVA must be inserted into the traffic path while preserving the original source and destination IP addresses. Which Azure solution should you implement?