Hacker News Reader

My current company doesn't do this but I'm curious how it is supposed to help with incident response and analysis. Are you talking about server traffic or employee laptop's traffic?

View on HN

I can't speak to how common the practice is but it's often an option on firewalls. My understanding of the reasoning behind it is that it allows the company to monitor employees usage of the network to protect from data exfiltration and malware that uses HTTPS.

It's usually done as part of a firewall that will MITM traffic on the network.

The employee laptop's traffic. I don't have many details since this is new to me too. Here is some solution and what it does. https://www.netskope.com/solutions

Reply on news.ycombinator.com