This question already has an answer here:
I see a few services advertising the ability to protect against phishing and ransomware attacks. ISPs sell services which supposedly protect you and some routers like Check Point 700/900 series. Is this real? How does this work? If I download malware/ransomeware or am sent a phishing email - that's likely TLS encrypted. Can the ISP/router decrypt and scan such traffic? Or is what they're advertising only for non encrypted traffic or just doesn't work?