Which network device is designed to block network connections that are identified as potentially malicious?

Question $1$ options:

Intrusion detection system $($IDS$)$

Intrusion prevention system $($firewall$)/($IPS$)$

Web server

Router