zScaler, man in the middle

Hello, my company is rolling out zScaler which is a cloud based "Firewall" that also opens up tls connections by issuing a *.1password.eu/com/ca intermediate certificate. My question are: 1. ...