That cannot be true or you could never do proper security or investigations. How would you know if an employee machine was compromised if you absolutely cannot

That cannot be true or you could never do proper security or investigations. How would you know if an employee machine was compromised if you absolutely cannot read their internet traffic? Sometimes you actually have to dump traffic an analyze it with wireshark to figure out something is wrong.