I think you need a follow-up question/s, such as.

OK, so are you saying it actually decrypts the SSL traffic so it can be scanned, as I thought the whole idea of SSL, secure encrypted connections was to keep prying eyes out including AVs ?

So what is it actually scanning ?