[nullrouted]

That cannot be true or you could never do proper security or investigations. How would you know if an employee machine was compromised if you absolutely cannot read their internet traffic? Sometimes you actually have to dump traffic an analyze it with wireshark to figure out something is wrong.

[manmal]

That's a grey area, and you should not do that here because judges mostly rule in favor of employees.