1. Zscaler. (n.d.). SSL/TLS Inspection Solution Brief. "Legacy security appliances, like firewalls, can’t inspect SSL/TLS traffic at scale because they lack the processing power to do so. As a result, most organizations don’t turn on SSL inspection, which leaves them blind to encrypted threats." (Page 1, Section: "The SSL/TLS Blind Spot").
2. Zscaler. (2023). ZTCA - Zero Trust Certified Architect Certification Courseware. Module 1: The Evolution of the Modern Enterprise. This module details the architectural limitations of legacy "castle-and-moat" security stacks, explicitly citing the performance impact of SSL/TLS inspection on hardware appliances as a critical failure point.