There are absolutely "bump-in-the-wire" intrusion prevention systems with MITM capability.