To my knowledge my company performs SSL Interception. Still if I visit a website I host, that uses a Let´s Encrypt certificate, the browser shows me my legit Let´s Encrypt cert.
To my understanding SSL Interception works like this:
My Client <----- encrypted with self signed cert from the firewall ----> Firewall (/w SSL Interception) <----- encrypted with the legit cert of the webiste----> HTTPS Webservice
Where the CA or Certificate that is used by the Firewall to intercept SSL has to be trusted by the Client (via GPO, etc.) and the browser of the client should show the interception certificate in the URL-bar.
So, is the SSL-Interception not working (i.e. misconfigured) or is it possible to do SSL-Interception with only the legit Certificate showing (from the Clients point of view)