Which security tool is being used?

A Network-based Intrusion Detection System (IDS) is designed to monitor network traffic for suspicious activity and potential threats but does not actively control or block traffic. Unlike a firewall, which can prevent unauthorized access, an IDS primarily serves as a detection tool that alerts administrators to potential issues.

Endpoint encryption is a security measure that protects data on devices by encoding it, making it unreadable without proper authorization. While it secures information at rest or in transit, it does not regulate network traffic or serve as a barrier against external threats, which is the primary function of a firewall.

A host-based firewall is a specific type of firewall that is installed on individual devices to control traffic to and from that device. Although it shares similar functionality with network firewalls, it is not the broad term that fits the question asking for a general security tool used for network protection.