Yep, we have proxy servers with SSL decryption/inspection. Root CA installed on all company devices. There are a number of whitelisted URLs (banks, and service

Yep, we have proxy servers with SSL decryption/inspection. Root CA installed on all company devices. There are a number of whitelisted URLs (banks, and services that refuse to work with a MITM'ed cert) but other than the initial headache during implementation, it is pretty seamless now.