FYI: Firewalls may also act as man-in-the-middle in order to perform deep packet inspection (example).