# Engine Editor > Add-Ons > TLS Inspection

Use this branch to activate TLS inspection. You can configure TLS inspection for client or server protection.

Note: These settings are not supported for Master Engines.

Option | Definition
--- | ---
Client Protection Certificate Authority | Select the Client Protection Certificate Authority element to use for client protection.
TLS Credentials | Specifies the Server Protection Credentials elements that are used for server protection. Click Add to add an element to the list, or Remove to remove the selected element.
Check Certificate Revocation | When selected, the Security Engine uses CRL or OCSP to check whether certificates have been revoked.
Decrypt All Traffic | When selected, the Security Engine forces all traffic to be decrypted. When the checkbox is not selected, the Security Engine either decrypts or does not decrypt traffic according to the settings in TLS Match elements.
Cryptography Suite Set (TLS 1.2 and lower) | Specifies the TLS Cryptography Suite Set element that defines which cryptographic algorithms are allowed for TLS traffic that is decrypted for TLS Client Protection. Click Select to select an element. Note: If you use TLS 1.3 with Security Engine version 6.11 or higher, the Security Engine decrypts all supported TLS 1.3 cryptographic algorithms.