Don't these systems usually use a splitter, thereby adding zero latency?
How do they inspect traffic when most is https?
alt Hacker News
How do they inspect traffic when most is https?