A security team notices that the organization's IDS and DLP tools are missing malware and data exfiltration hidden inside HTTPS sessions, because the traffic is encrypted end-to-end. Management wants to enable inspection of this outbound web traffic without deploying agents on every endpoint. Which enterprise capability should be implemented at the network perimeter to accomplish this?