A network administrator wants a device that not only detects malicious traffic patterns but also automatically blocks the offending packets before they reach internal servers. The device must be placed inline in the traffic path. Which technology best meets this requirement?