# Managing your TLS inspection configuration in Network Firewall
<a name="managing-tls-configuration"></a>

This section describes how to create, update, and delete a TLS inspection configuration in Network Firewall. To turn on TLS inspection for your firewall, create a TLS inspection configuration, add the TLS inspection configuration to a firewall policy, then associate the firewall policy with your firewall. 

You can only add a TLS inspection configuration to a new policy, not to an existing policy. However, you can replace an existing TLS inspection configuration with another TLS inspection configuration in a firewall policy. To add a TLS inspection configuration to a firewall policy or update an existing TLS inspection configuration, see [Managing your firewall policy](firewall-policy-managing.md).

**Note**  
A TLS inspection configuration is only available for use by the account that you use to create it. It can't be shared across accounts.

**Topics**
+ [Creating a TLS inspection configuration in Network Firewall](creating-tls-configuration.md)
+ [Updating a TLS inspection configuration in Network Firewall](updating-tls-configuration.md)
+ [Deleting a TLS inspection configuration in Network Firewall](deleting-tls-configuration.md)