Intrusion Detection Service and Intrusion Prevention Service, probably running on the Router. Scans all traffic and detects threats, when IPS is enabled then actively blocks those connections.