Question

Which network device is capable of blocking network connections that are identified as potentially malicious?

Answer 1

The network device which is capable of blocking potentially malicious network connection is called INTRUSION PREVENTION SYSTEM {IPS].
IPS works by monitoring the network traffic and by identifying and blocking potentially malicious network connections.