A college needs to protect its network from unauthorized access and malware attacks. The college installs a device that will act as a barrier between the internal campus network and the Internet by filtering incoming and outgoing traffic based on predefined rules. What is this type of device called?