An engineer must install a firewall and IPS that does not deny traffic to hosts but notifies another device to block traffic. In which mode is the IPS deployed?