Those had to switch over to endpoint agents installed on work devices directly due to TLS 1.3 preventing MITM for domains which you do not control.