Zorus and decryption

I see that Zorus does DNS sinkholing and GeoIP blocking [based on Toms video] but what im not seeing is can it do TLS Decryption.
If it does do TLS decryption how does that play into scanning packets for malware?

Because it runs on the devices it’s protecting it does not need to do the full TLS decryption and it’s not a malware scanner it just blocks known bad sites & recently registered domains.