A network security engineer is asked to deploy a sensor that must actively block malicious packets before they reach internal servers, without relying on a separate device to drop the traffic afterward. The sensor will be placed directly in the path of live traffic between the perimeter firewall and the server farm. Which security deployment does this describe?