In addition to plain traffic, the UserGate platform supports filtering of encrypted traffic (HTTPS, SMTPS, POP3S) by decrypting it using the MITM (Man In The Middle) technique, signing it with a trusted root certificate, and re-encrypting it after analysis. You can configure selective traffic filtering --- e.g., exclude resources in the "Finance" category from decryption.