A security team wants a network appliance that not only detects malicious traffic patterns but also actively drops the offending packets in real time before they reach internal servers. The device must be placed directly in the traffic path so it can take action automatically. Which appliance best meets these requirements?