The enterprise where I work has a proxy server that traces and filters our web activities. Employees claim that they can know the links that we visited and see the content of HTTP web sites, but they can't see the content of HTTPS secured web sites because the content would be encrypted by the server. I don't share the same idea and I think that there are plenty of ways to access the HTTPS content.
Could someone give me some type of attacks that could let them access the content of our HTTPS secured navigation or hijack our sessions?
Just guessing: One of the things that could increase the risk that they can execute a MITM attack as the image shows is the fact that they give a preinstalled Windows XP/7 system to new employees so they can install malicious certificates to these computers and make them trust additional Certification authorities