> Deep L7 inspection -- Optional TLS SNI and DNS query extraction for domain-level visibility into encrypted traffic.

Nice feature. Would be useful to add active traffic management block/drop in the future, in addition to the existing passive analysis.