What physical device or software application is used to restrict which TCP and UDP ports can be used by a network device?