A company's network administrator is configuring a new network segment for the HR department to enhance security and monitoring capabilities. They want to implement a device that has the ability to not only detect network threats but also take immediate action to prevent potential breaches. Which of the following devices should be deployed within this network segment?