Extensive proxying? MITM? There's no reason they wouldn't put their own root certificate onto the machines. For most work on Wall Street one probably doesn't even need to be connected to the internet.
However, a lot people use machines they don't control where this kind of approach is perfectly feasible.