big corporation with everyone working in a building, 100% achievable but with everyone working from home these days, it's a big challenge to have all users' in

big corporation with everyone working in a building, 100% achievable but with everyone working from home these days, it's a big challenge to have all users' internet traffic through a single gateway in some sort of VPN is not scalable. Most corp has to support split tunnel to make it work-able... Lots of IoC base on DNS as well so that is out of the windows since the malicious traffic is inside TLS...:-/